Dynamic Clients Settings

When the number of RADIUS clients is too large for listing then manually in Configurator, it may become useful to store the clients in some SQL data source.

ClearBox offers two options here:

• Query a data source at the server startup for the list of authorized clients and their secrets.
• Query for client secrets at run-time, just when it receives a request from an unknown client.

Select Dynamic Clients under RADIUS Clients:

Data source. Select a database source from the list. This source will be queried for the clients list.

Query string. Specifies the SQL command selecting client IP addresses and secrets at the server startup. Each row returned by the query should have two or three fields. The first row is a string with client's IP address or a number representing this address (in network-byte order). The second field should be a string with the secret shared by the client. The third field is optional and may be a string with client default realm name.

Query for client secrets at run-time. Check this option on to make the server issue the Query string query each time it receives a request from an unknown client (this client IP address is denoted by $c). This SQL command should select one row with one field containing the string with the secret from the Data source. If no row is selected, all requests from this host are discarded.

The typical query string is:

SELECT Secret FROM NASes WHERE IPAddress='$c'

Apply Changes. Click to save the query and other database settings.

Preview Results. You may click it to preview the result of the query specified.