Next: NAS List — raddb/naslist, Previous: Dictionary of Attributes — raddb/dictionary, Up: Radius Configuration Files [Contents][Index]
The raddb/clients lists NASes which are allowed to make authentication requests. As usual, the ‘#’ character introduces a comment. Each record in the file consists of two fields, separated by whitespace. The fields are:
Specifies a hostname or IP address of the NAS.
Lists the encryption key shared between the server and this NAS.
If the set of NASes share the same encryption key, there are two
ways to list it in raddb/clients. First, if these NASes
lie in a single network, you can specify this network address in
NAS name field, e.g.:
10.10.10.0/27 seCRet
Notice also that specifying full netmask after the ‘/’ character is also allowed, so that the above example could also be written as follows:
10.10.10.0/255.255.255.224 seCRet
Otherwise, the keyword DEFAULT may be used as NAS name. This
notation will match any IP address, so it should be used with caution.