as5300 and radius

[jfeddaoui]

I have 2 nas (as5300) and a radius server for dialup users authentication.in nas, a loopback interface is configured with an ip address aaa.aaa.aaa.125 in nas1 and aaa.aaa.aaa.189 in the other.the problem is that the nas indentifier is aaa.aaa.aaa.125 for the 2 nas .my question is why,in radius,nas identifier is not ip address of Fast ethernet of each nas? and is it necessary to put a loopback interface in configuration?

[jduffek]

Isn't there a "ip radius source-interface X" command?

Josh

[tepatel]

You don't need to have loopback interface configured on nas just to identify NAS in radius..In general, the nas ip address which should be configured in radius is the "ip address of the interface thru which nas can reach radius"..

BUT some admin prefer to have packet for radius from nas with a source ip address of "loopback" using ip radius source-interface x.x.x.x as loopback is virtual interface which is always "up and up"..In that case we need to identify nas as the loopback ip address in radius..Tejal