diff --git a/hostapd/hostapd.conf b/hostapd/hostapd.conf
index 8834ccfbf..0de4b8569 100644
--- a/hostapd/hostapd.conf
+++ b/hostapd/hostapd.conf
@@ -1191,6 +1191,8 @@ own_ip_addr=127.0.0.1
 #radius_das_port=3799
 #
 # DAS client (the host that can send Disconnect/CoA requests) and shared secret
+# Format: <IP address> <shared secret>
+# IP address 0.0.0.0 can be used to allow requests from any address.
 #radius_das_client=192.168.1.123 shared secret here
 #
 # DAS Event-Timestamp time window in seconds
diff --git a/src/radius/radius_das.c b/src/radius/radius_das.c
index 0a0cf8ed4..aaa3fc267 100644
--- a/src/radius/radius_das.c
+++ b/src/radius/radius_das.c
@@ -413,7 +413,8 @@ static void radius_das_receive(int sock, void *eloop_ctx, void *sock_ctx)
 
 	wpa_printf(MSG_DEBUG, "DAS: Received %d bytes from %s:%d",
 		   len, abuf, from_port);
-	if (das->client_addr.u.v4.s_addr != from.sin.sin_addr.s_addr) {
+	if (das->client_addr.u.v4.s_addr &&
+	    das->client_addr.u.v4.s_addr != from.sin.sin_addr.s_addr) {
 		wpa_printf(MSG_DEBUG, "DAS: Drop message from unknown client");
 		return;
 	}