Ah - but keep in mind:
1. The NAS is NOT required to send NAS-IP-Address. It may send NAS-Identifier
instead.
2. The NAS-IP-Address may not actually be the IP source address of the TCP
connection. As has been discussed on the WG, some NASen may have multiple
IP addresses (multiple interfaces, subinterfaces, etc) and the IP used to
talk to RADIUS may NOT be the IP address used for an authorized service.
So really you have no reliable info on the NAS side of the connection -
though there are fair odds that NAS-IP-Address will be the source IP.
-MZ
-- -=*X I'm going down... under that is! <URL:http://www.aussie-isp.net/> X*=- <URL:mailto:megazone@megazone.org> Gweep, Discordian, Author, Engineer, me.. Join ISP/C Internet Service Providers' Consortium <URL:http://www.ispc.org/> "A little nonsense now and then, is relished by the wisest men" 781-788-0130 <URL:http://www.megazone.org/> <URL:http://www.gweep.net/> Hail Discordia! - To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message. Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>