Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    calling-station-id attribute question

    Scheduled Pinned Locked Moved OpenVPN
    1 Posts 1 Posters 249 Views 1 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J Offline
      jazzl0ver
      last edited by

      Hi there,

      While setting up 2FA, I've found out that pfSense sets Calling-Station-Id radius attribute to the pfSense IP and port rather than to the client's IP address:

      # grep -n "calling_station_id" /etc/inc/openvpn.auth-user.php
      105:    "calling_station_id" => get_interface_ip() . ":" . $_GET['nas_port']);
      

      Is there a solid reason for that? NAS IP and port can definitely be retrieved from the other attributes: NAS-IP-Address and NAS-Port

      As a consequence, this lacks the ability to catch the connecting client IP address in some custom logic (radius accounting packets sending).

      I can create a ticket redmine which fixes this issue. Please, let me know

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.