calling-station-id attribute question
-
Hi there,
While setting up 2FA, I've found out that pfSense sets
Calling-Station-Id
radius attribute to the pfSense IP and port rather than to the client's IP address:# grep -n "calling_station_id" /etc/inc/openvpn.auth-user.php 105: "calling_station_id" => get_interface_ip() . ":" . $_GET['nas_port']);
Is there a solid reason for that? NAS IP and port can definitely be retrieved from the other attributes:
NAS-IP-Address
andNAS-Port
As a consequence, this lacks the ability to catch the connecting client IP address in some custom logic (radius accounting packets sending).
I can create a ticket redmine which fixes this issue. Please, let me know
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.