freebsd security - Jan 2006 - mpd and radius

Hi all:

I ahve some basic questions regarding the mpd.conf:

set radius retries 3
set radius timeout 3
set radius server 192.168.128.101 testing123 1812 1813
set radius me 1.1.1.1
set bundle enable radius-auth radius-fallback

Here my radius server is 192.168.128.101 and interanl
interface of this mpd server is 192.168.64.65

1) What is this "testing123"? is that key between
radius server and the nas (the pptp box)?

"set radius me 1.1.1.1
#send the given IP in the RAD_NAS_IP_ADDRESS attribute
to the server."

Could any guru explain this? which given IP address?

Thanks




__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

On Wed, 25 Jan 2006, gahn wrote:
> Hi all:
>
> I ahve some basic questions regarding the mpd.conf:
>
> set radius retries 3
> set radius timeout 3
> set radius server 192.168.128.101 testing123 1812 1813
> set radius me 1.1.1.1
> set bundle enable radius-auth radius-fallback
>
> Here my radius server is 192.168.128.101 and interanl
> interface of this mpd server is 192.168.64.65
>
> 1) What is this "testing123"? is that key between
> radius server and the nas (the pptp box)?

Yes. This is a shared secret between your radius server and "nas"
boxes.
Any clients which is accessing radius server should use their respective 
shared secret. If you are using freeradius you should configure it in 
clients.conf  and your "nas" box. You should also select a reasonably 
complex shared secret to prevent brute force guessing attack against your 
radius server.
>
> "set radius me 1.1.1.1
> #send the given IP in the RAD_NAS_IP_ADDRESS attribute
> to the server."
This one is the IP address configured for this NAS/client...

Regards,
  	Janos Mohacsi