multiple NAS behind multiple NAT with one radius server.

[甄鹏]

Hello Everybody:
Recently I am working on a project, it requires a radius server(which i use freeradius for sure) that could be shared by multiple NASes which are behind multiple NAT.(one NAS to one NAT)
But not really easy for me, i have the following problem.
I use freeradius+mysql, for the radius.nas table,it requires nasname which must be(£¿) the IP address of the NAS,but NAS only have a private IP address like 192.168.***.***£¬i know after through the NAT,it will get a public IP address, but the IP address is dynamics,so How could I set up the nasname for radius.nas table??? I read the clients.conf file, it said the nasname could be a hostname,but it also said the radius server will only inquire the DNS server for one time,so what will happen if the router of NAT rebooted and got a different IP address??
Is there anyway could solve my problems?
Right now,what i am doing is I said the nasname as 0.0.0.0 and netmask 0 (in clients.conf),two different NAS could be connect to the radius server? is this a solution?
Thank you in advanced.

[Dirk van der Walt]

Hi,

You may want to look at this discussion that took place on the mailing list
about the same issue and possible solutions to handle the problem:

http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Station-ID-Not-IP-tc4883866.html
http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Station-ID-Not-IP-tc4883866.html

Regards

--
View this message in context: http://freeradius.1045715.n5.nabble.com/multiple-NAS-behind-multiple-NAT-with-one-radius-server-tp5561001p5564209.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[ZhenJoey]

it is really helpful,thank you very much.




> Date: Wed, 14 Mar 2012 03:47:31 -0700
> From: ***@gmail.com
> To: freeradius-***@lists.freeradius.org
> Subject: Re: multiple NAS behind multiple NAT with one radius server.
>
> Hi,
>
> You may want to look at this discussion that took place on the mailing list
> about the same issue and possible solutions to handle the problem:
>
> http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Station-ID-Not-IP-tc4883866.html
> http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Station-ID-Not-IP-tc4883866.html
>
> Regards
>
> --
> View this message in context: http://freeradius.1045715.n5.nabble.com/multiple-NAS-behind-multiple-NAT-with-one-radius-server-tp5561001p5564209.html
> Sent from the FreeRadius - User mailing list archive at Nabble.com.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[ZhenJoey]

Hello Dirk:
I read this article, it is really helpful, thank you very much.
Before reading it, my solution is set a single client entry in clients.conf like this
client allAP
{
ipaddr=0.0.0.0
netmask=0
sercet=something
...
}
right now ,it works fine for multiple NAS.
I want to know,ignore the security issues, does all clients use the same single entry will effect the performance of the radius server?
thank you very much.
Joey




> Date: Wed, 14 Mar 2012 03:47:31 -0700
> From: ***@gmail.com
> To: freeradius-***@lists.freeradius.org
> Subject: Re: multiple NAS behind multiple NAT with one radius server.
>
> Hi,
>
> You may want to look at this discussion that took place on the mailing list
> about the same issue and possible solutions to handle the problem:
>
> http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Station-ID-Not-IP-tc4883866.html
> http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Station-ID-Not-IP-tc4883866.html
>
> Regards
>
> --
> View this message in context: http://freeradius.1045715.n5.nabble.com/multiple-NAS-behind-multiple-NAT-with-one-radius-server-tp5561001p5564209.html
> Sent from the FreeRadius - User mailing list archive at Nabble.com.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Alan DeKok]

ZhenJoey wrote:
> I want to know,ignore the security issues, does all clients use the same
> single entry will effect the performance of the radius server?

No.

Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html