Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Radius Access request to use configured src interface #230

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

lakshmi-nexthop
Copy link

@lakshmi-nexthop lakshmi-nexthop commented Mar 14, 2025

Fixes Issue: https://github.com/sonic-net/sonic-buildimage/issues/21386

Why I did it
When authentication is triggered by the DUT, source interface configured under radius needs to be used for sending access request.

How I did it
config db needs to be looked up for the source interface from the radius config and store the IP address of this interface in the pam_radius_auth file.

How to verify:

  • Configured AAA authentication, configured radius with source interface as uplink port channel.
    tb1@sonic:~$ sudo config aaa authentication login radius local
    tb1@sonic:~$ sudo config radius add -s PortChannel100 -k test -p 3 10.120.20.1
  • initiate ssh into the dut. this triggers radius auth request
  • access request is sent out with port channel ip address as source

Copy link

linux-foundation-easycla bot commented Mar 14, 2025

CLA Signed

The committers listed above are authorized under a signed CLA.

  • ✅ login: lakshmi-nexthop (c0a87bb)

@mssonicbld
Copy link

/azp run

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@lakshmi-nexthop lakshmi-nexthop force-pushed the radius_config_src_intf branch from db3e536 to c0a87bb Compare March 15, 2025 00:15
@mssonicbld
Copy link

/azp run

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants