2009/7/9 Ivan Kalik <t...@kalik.net> > > If the network only has the NAS1 device, the CLIENT1 can pass the > > authentication. When the network have two NAS device, which one is > NAS1 > > and the other is NAS2, the CLIENT1 request can send to NAS1 and NAS2, > > then NAS1 and NAS2 all send the request to radius. I don't know > > whether CLIENT1 under NAS1 or NAS2 in radius. How to control a > > wpa_supplicant client request can only send to a hostapd NAS? > > The CLIENT1 MAC: 00:0F:1E:34:28:B4 > > The NAS1 MAC: 00:0F:1E:34:26:50 > > The NAS2 MAC: 00:0f:1e:00:00:83 > > That's one way - NAS mac address will be in Called-Station-Id. Or use > NAS-IP-Address. > > > The RADIUS log > > -------------------------- > > rad_recv: Access-Request packet from host 192.168.1.45 port 1024, id=0, > > length=168 > > User-Name = "00:0F:1E:34:28:B4" > > NAS-IP-Address = 192.168.1.45 > > Called-Station-Id = "00-0F-1E-34-26-50:" > > > > rad_recv: Access-Request packet from host 192.168.1.44 port 1024, id=1, > > length=186 > > User-Name = "00:0F:1E:34:28:B4" > > NAS-IP-Address = 192.168.1.44 > > Called-Station-Id = "00-0F-1E-00-00-83:" > > Ivan Kalik > Kalik Informatika ISP > <http://www.freeradius.org/list/users.html>
Hi: Ivan Kalik Thank your suggestion! In that, The NAS1 MAC is 00:0F:1E:34:26:50, The NAS2 MAC is 00:0f:1e:00:00:83. The problem was that they all could received the request of The CLIENT1, so I couldn't known whether CLIENT1 under NAS1 or NAS2 in radius.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html