IP Pool defined, but radius does not hand out an IP address.

Andrew D Kirch trelane at trelane.net
Thu Jan 24 18:18:06 CET 2008


When I connect a client to freeradius the client authenticates, gets an
accept/accept, but does not get an IP address.  I've tried it with the
Group and Pool-Name directives in each client's block, and I've tried it
with them in a DEFAULT by themselves.  Neither has handed out an IP address.

System vitals:
radius:/etc/freeradius# uname -a
Linux radius 2.6.18-5-686 #1 SMP Mon Dec 24 16:41:07 UTC 2007 i686 GNU/Linux
radius:/etc/freeradius# cat /etc/debian_version
4.0
radius:/etc/freeradius# freeradius -v
freeradius: FreeRADIUS Version 1.1.3, for host i486-pc-linux-gnu, built
on Dec 16 2006 at 23:48:11

# radtest umcc xxxxxx localhost 0 xxxxxxx
Sending Access-Request of id 144 to 127.0.0.1 port 1812
        User-Name = "umcc"
        User-Password = "bts10200"
        NAS-IP-Address = 255.255.255.255
        NAS-Port = 0
rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=144, length=44
        Service-Type = Framed-User
        Framed-IP-Netmask = 255.255.255.255
        Framed-Protocol = PPP
        Framed-Compression = Van-Jacobson-TCP-IP

radius.log:
Thu Jan 24 11:20:51 2008 : Info: rlm_exec: Wait=yes but no output
defined. Did you mean output=none?
Thu Jan 24 11:20:51 2008 : Info: Ready to process requests.
Thu Jan 24 11:32:33 2008 : Auth: Login OK: [umcc] (from client
localhost-testing port 0)

users:
umcc    User-Password == "xxxxxx"
        Service-Type = Framed-User,
        Framed-IP-Netmask = 255.255.255.255,
        Group == main_pool,
        Pool-Name := "main_pool",
        Framed-Protocol = PPP,
        Framed-Compression = Van-Jacobsen-TCP-IP

radiusd.conf (pertinent sections)
     ippool main_pool {
                range-start = 208.64.35.2
                range-stop = 208.64.35.254
                netmask = 255.255.255.255
                cache-size = 253
                session-db = ${raddbdir}/db.ippool
                ip-index = ${raddbdir}/db.ipindex
                override = yes
                maximum-timeout = 0
        }
accounting {
        detail
        unix
        radutmp
        main_pool
}
post-auth {
        main_pool
}







More information about the Freeradius-Users mailing list