Re: Placing Radius server in DMZ using iptables

From: Sebastian Cole (XXXXXsebastian_cole@hushmail.comXXXXX)
Date: 03/29/02


From: XXXXXsebastian_cole@hushmail.comXXXXX (Sebastian Cole)
Date: Fri, 29 Mar 2002 17:57:11 -0500

In article <c2944c83.0203280620.19648161@posting.google.com>,
asaavedra@grupobisa.com says...
> I am having a little problem and I need your help.
>
> I need to put a Radius Server in a DMZ, I'm using iptables.
>
> I had successfully implement the rules and set the different ports
> 1812, 1813, 1645, 1646 and got a Perl script to connect to the Radius
> server through the firewall and it is running fine.
>
> But when I try it with the RAS Server to send the information to the
> Radius Server through the firewall, the request is not accepted. The
> only thing I am doing is moving the Radius server to the DMZ so Radius
> is perfectly configured. By the way Radius Server is in a Solaris box.
>

sniff the incoming requests on the Radius box, capture the packets
coming from the RAS server and break it down, look for the return
information and try to set your firewall appropriately from the
information you obtain from the packet capture.

> Does any have any experience or tips with this configuration ?
>
> Best regards,
> Alberto Saavedra
>

-- 
s.c.



Relevant Pages

  • Re: Publishing RADIUS server for external authentication
    ... > You should be able to Server Publish the RADIUS server you're using. ... > If your DMZ uses private IP addresses, you should also have a NAT ... > This post is provided "AS-IS", and confers no warranty. ...
    (microsoft.public.isaserver)
  • Re: Publishing RADIUS server for external authentication
    ... You should be able to Server Publish the RADIUS server you're using. ... If your DMZ uses private IP addresses, you should also have a NAT ... We have ISA server 2004 installed on Windows 2003 with a private IP DMZ. ... sell off dial ups so we need external RADIUS clients to connect with our ...
    (microsoft.public.isaserver)
  • Re: ISA2004 and OWA Exchange 2003 Questions.
    ... RADIUS server in the *internal* network. ... > I am tasked with getting ISA 2004 up and running in the DMZ to ONLY host ... > need to setup MS Internet Authentication Server to run Radius in the ...
    (microsoft.public.isa)
  • Re: Dicussion on where RADIUS server should be
    ... Then if an external user ... > attempts to connect via VPN, then I would allow only the ports ... > I have a security guy fellow here that tells me that the RADIUS server ... server in it's own DMZ and strictly control access to it, ...
    (microsoft.public.security)
  • Placing Radius server in DMZ using iptables
    ... I need to put a Radius Server in a DMZ, I'm using iptables. ... Radius Server through the firewall, ...
    (comp.os.linux.security)