Instant On - Wireless

 View Only

Obtain client IP after RADIUS authentication

  • 1.  Obtain client IP after RADIUS authentication

    Posted 12-19-2023 12:16 PM

    My Wi-Fi clients use 3 InstantOn Access Points. These are authenticated using FreeRADIUS. The users are locally known on the RADIUS server (no database). The authentication process is smooth. In the logs, I see the logins and logouts. I am now trying to log the client IP address in my RADIUS logs when a Wi-Fi client logs in. In the FreeRADIUS config, I have included various runtime variables, but they only log the IP address of the AP to which the Wi-Fi device is connecting.

    For example:

    Dec 14 10:03:11 pfSense radiusd[63657]: (13) Login OK: [<username>] (from client ap-<serial> port 0 cli <client mac address>) 172.31.4.51

    Here, 172.31.4.51 is the IP address of one of my APs. The client MAC address is displayed correctly. I have tried various FreeRADIUS attributes, including %{Framed-IP-Address}, %{Packet-Src-IP-Address}, %{NAS-IP-Address}, %{client:ipaddr}. They all return the NAS IP and not the client IP. Does anyone have suggestions on how I can get the client IP of my Wi-Fi devices into my RADIUS logs?



    ------------------------------
    Sandmouse Sandb0x
    ------------------------------