From 69a1f61badf11f8324468c3caee033d779c3811d Mon Sep 17 00:00:00 2001 From: Christian Poessinger Date: Tue, 23 Apr 2019 13:02:27 +0200 Subject: Login: specify RADIUS source address --- docs/system/system-users.rst | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/docs/system/system-users.rst b/docs/system/system-users.rst index 67786f20..acffb974 100644 --- a/docs/system/system-users.rst +++ b/docs/system/system-users.rst @@ -95,3 +95,16 @@ This configuration results in: radius-server 192.168.1.3 { secret s3cr3t0816 } + +Source Address +************** + +RADIUS servers could be hardened by only allowing certain IP addresses to connect. +As of this the source address of each RADIUS query can be configured. If this is +not set incoming connections to the RADIUS server will use the nearest interface +address pointing towards the RADIUS server - making it error prone on e.g. OSPF +networks when a link fails. + +.. code-block:: sh + + set system login radius-source-address 192.168.1.254 -- cgit v1.2.3