Bypass SQLIPPOOL via variable?

bearon at gmail.com bearon at gmail.com
Thu Nov 1 21:02:55 CET 2012


Hello,

First off let me say, Freeradius works great!  That being said I have an
issue that I'm wondering if anyone has insight into.  We have freeradius
serving vpn servers for our internal employees using PPTP, L2TP/IPSEC, and
lastly OpenVPN.  The problem we are running into is with OpenVPN and the
assignment of IP addresses from the IP pool.  Due to a limitation in the
TAP implementation, IPs given from the IP pool have to be part of a /30 and
we cannot guarantee this.  Since OpenVPN registers itself as a "Virtual"
connection while PPTP/L2TP use "Async" is there a way to stop the sqlippool
assignment based off this?  i.e. by default if user is in dynamic IP pool
they get a dynamic IP.  If they are coming in as a "Virtual" connection,
drop out of SQLIPPOOL and just let freeradius auth the connection and then
let OpenVPN use it's predefined IP pool which we will in turn NAT?  Any
insight would be great.  Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20121101/9de5383a/attachment-0001.html>


More information about the Freeradius-Users mailing list