vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Login: specify RADIUS source address

Browse Source
This commit is contained in:
Christian Poessinger 2019-04-23 13:02:27 +02:00
parent c0a077b745
commit 69a1f61bad
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docs/system/system-users.rst
View File

@ -95,3 +95,16 @@ This configuration results in:
radius-server 192.168.1.3 { radius-server 192.168.1.3 {
secret s3cr3t0816 secret s3cr3t0816
} }
Source Address
**************
RADIUS servers could be hardened by only allowing certain IP addresses to connect.
As of this the source address of each RADIUS query can be configured. If this is
not set incoming connections to the RADIUS server will use the nearest interface
address pointing towards the RADIUS server - making it error prone on e.g. OSPF
networks when a link fails.
.. code-block:: sh
set system login radius-source-address 192.168.1.254