Hi;
Can a different RADIUS Service client be defined uniquely by its hostname? Even if the IP address is the same?
For example a.abc.com defines radius service client1 which requests a single factor password authentication only
b.abc.com defines radius service client2 which requests a two factor authentication
However, both a.abc.com and b.abc.com share the same IP address?
Kindly
Wasfi
Hi Wasfi,
as your NAS/client is going to come to FAC from same IP and there is restriction that RADIUS Client defined by single IP has to be unique, then I would suggest to utilize RADIUS Client Profiles.
Because one client can have multiple different profiles and each profile has its own definition if it requires/enforces 2FA.
Have a look into profile and pay attention to "Apply this profile based on RADIUS attributes.".
If your a.abc.com client can send some AVP which is unique to this service, then you can use to differentiate between such services/clients regardless they are coming through single IP (applies to NATed as well).
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
