RE: [Help-gnu-radius] Client ip Address.

[Jean Pierre Telschow]

I have this scenario:

[Clients] ---> [Telecom] ---link L2tp---> [MyRouter] ---> [MyFirewall]
---> [MyRadiusServer]

MyRouter = Have 1 Valid IP
MyFirewall = Have 4 valid IP and 1 Invalid IP (DMZ)
MyRadiusServer = Is placed in a DMZ network (192.168....)

I need attrib a invalid IP to my Clients !!!! (Same as VPN).

The clients connect to a telecom, them, this conection
Is forward to my router, this package go to my firewall
and is NAT´ed in 1645 port to DMZ where myRadius auth
This client, and stablish a conection with Client.

Now is more clearly ?

:-)

Sorry !!!

Jean Pierre


-----Original Message-----
From: Gerald [mailto:address@hidden 
Sent: quinta-feira, 6 de novembro de 2003 18:11
To: Jean Pierre Telschow
Cc: address@hidden
Subject: Re: [Help-gnu-radius] Client ip Address.


On Thu, 6 Nov 2003, Jean Pierre Telschow wrote:

>       I have this configuration in my users file:
>
>       DEFAULT Auth-Type = System,
>         Simultaneous-Use = 1
>         Service-Type = Framed-User,
>         Framed-IP-Address = xxx.xxx.xxx.xxx+,
>         Framed-IP-Netmask = 255.255.255.248

The xxx.xxx.xxx.xxx+ part tells radius to add the port number to
xxx.xxx.xxx.xxx's IP address in order to assign a number. What port
number is your RAS equipment giving radius? If my Example IP (10.4.10.1)
is the conflict, you can change the address to specify something that is
not in use.

if this is set to 192.168.50.1+ and the RAS says the port number is 1021
then radius will hand out the IP:

192.168.50.1 + 1021 = 192.168.53.254

Some things that would help me provide a better example:

What type of equipment/software are you pointing to gnu-radius to
authenticate?

How many users do you need to specify the address for?

Gerald