
Free radius reloading, new setting and reading NAS information for Radius.nas table

The NAS table in MySQL
Traditionally, we will use clients.conf for NAS lists control. But what if, your NAS is using dynamic ip address ?
Imagine the scenario
1. You Radius server hosted in datacenter at radius.yourdomain.com
2. You have 100 of wireless AP that scattered around the country.
3.Each time the AP dies, ISP will provide them with dynamic IP
4. How to tell radius, each AP new ip address so that users connected to the Ap can authenticate with radius server ?
Solution
1. Use Nas MySQL option, turn on readclients = yes in sql.conf
2. Write a simple cron job to update NAS IP every 10 minutes
3. Use http $_GET to retrieve nas informations in the radius server and update the mysql.Each nas will have different nas-secret.
4. Set the radius server to reread configuration when there's in update on nas table.
5. Problem solved
hi there , what if we want to limit the user USER1 to login only on NAS1 , NAS2 but not on NAS3 ?
ReplyDeleteall the NAS-es have dynamic IP so we can use the Huntgroups
Thanks
all the NAS-es have dynamic IP so we CANT use the Huntgroups
ReplyDelete