Solved.<br><br>Pool-Name is a check item :<br><br>users:<br><br>DEFAULT Huntgroup-Name == "t1", Pool-Name := Pool-t1<br> Fall-Through = No
<br><br>DEFAULT Huntgroup-Name == "t2", Pool-Name := Pool-t2<br> Fall-Through = No<br><br>DEFAULT Huntgroup-Name == "d1", Pool-Name := Pool-d1<br> Fall-Through = No
<br><br><br><div><span class="gmail_quote">On 9/19/06, <b class="gmail_sendername">Ami Schieber</b> <<a href="mailto:ami.schieber@gmail.com">ami.schieber@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>Hi,<br><br>I have 3 NAS and want to assign Framed-IP-Address from 3 different IP pools according to the NAS the user logs in from.<br>Config below looks fine to me and I can see that the huntgroup is indeed matched but there seems to be a problem with the postauth definition.
<br><br>Please advise,<br><br>Ami<br><br>My config has :<br><br><span id="st" name="st" class="st">huntgroups</span>:<br><br>t1 NAS-IP-Address == <a href="http://172.16.2.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
172.16.2.1</a><br><br>t2 NAS-IP-Address == <a href="http://172.16.3.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">172.16.3.1
</a><br><br>d1 NAS-IP-Address == <a href="http://172.16.4.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">172.16.4.1</a><br><br>users:<br><br>DEFAULT Huntgroup-Name == "t1"
<br> Pool-Name := Pool-t1,<br> Fall-Through = No
<br><br>DEFAULT Huntgroup-Name == "t2"<br> Pool-Name := Pool-t2,<br> Fall-Through = No<br><br>DEFAULT Huntgroup-Name == "d1"<br> Pool-Name := Pool-d1,
<br> Fall-Through = No<br><br>Radiusd.conf:<br><br>ippool Pool-t1 {<br> range-start = <a href="http://172.16.2.30" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">172.16.2.30
</a><br> range-stop = <a href="http://172.16.2.50" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
172.16.2.50</a><br> netmask = <a href="http://255.255.255.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">255.255.255.0</a><br> cache-size = 20<br> session-db = ${raddbdir}/t1db.ippool
<br> ip-index = ${raddbdir}/t1db.ipindex
<br> }<br><br> ippool Pool-t2 {<br> range-start = <a href="http://172.16.3.30" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">172.16.3.30</a><br> range-stop =
<a href="http://172.16.3.50" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">172.16.3.50</a><br> netmask =
<a href="http://255.255.255.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">255.255.255.0</a><br> cache-size = 20<br> session-db = ${raddbdir}/t2db.ippool<br> ip-index = ${raddbdir}/t2db.ipindex
<br> }<br><br> ippool Pool-d1 {
<br> range-start = <a href="http://172.16.4.30" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">172.16.4.30</a><br> range-stop = <a href="http://172.16.4.50" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
172.16.4.50</a><br> netmask = <a href="http://255.255.255.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">255.255.255.0
</a><br> cache-size = 20<br> session-db = ${raddbdir}/d1db.ippool<br> ip-index = ${raddbdir}/d1db.ipindex<br> }<br><br>accounting {<br> radutmp<br> # Return an address to the IP Pool when we see a stop record.
<br> Pool-t1<br> Pool-t2<br> Pool-d1<br>}<br><br>post-auth {<br> # Get an address from the IP Pool<br> Pool-t1<br> Pool-t2<br> Pool-d1<br>}<br><br><br><br><br>log:<br><br>
rad_recv: Access-Request packet from host <a href="http://172.16.3.1:32802" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">172.16.3.1:32802</a>, id=122, length=55<br> User-Name = "Ami"
<br> User-Password = "ami123"<br> NAS-Port = 11
<br> NAS-IP-Address = <a href="http://172.16.3.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">172.16.3.1</a><br> Processing the authorize section of radiusd.conf<br>modcall: entering group authorize for request 0
<br> modcall[authorize]: module "preprocess" returns ok for request 0
<br> modcall[authorize]: module "chap" returns noop for request 0<br> modcall[authorize]: module "mschap" returns noop for request 0<br> rlm_realm: No '@' in User-Name = "Ami", looking up realm NULL
<br> rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "suffix" returns noop for request 0<br> rlm_eap: No EAP-Message, not doing EAP<br> modcall[authorize]: module "eap" returns noop for request 0
<br> users: Matched entry Ami at line 26<br> users: Matched entry DEFAULT at line 41<br> modcall[authorize]: module "files" returns ok for request 0<br>modcall: leaving group authorize (returns ok) for request 0
<br>auth: type Local<br>auth: user supplied User-Password matches local User-Password<br> Processing the post-auth section of radiusd.conf<br>modcall: entering group post-auth for request 0<br>rlm_ippool: Could not find Pool-Name attribute.
<br> modcall[post-auth]: module "Pool-t1" returns noop for request 0<br>rlm_ippool: Could not find Pool-Name attribute.<br> modcall[post-auth]: module "Pool-t2" returns noop for request 0<br>rlm_ippool: Could not find Pool-Name attribute.
<br> modcall[post-auth]: module "Pool-d1" returns noop for request 0<br>modcall: leaving group post-auth (returns noop) for request 0<br>Sending Access-Accept of id 122 to <a href="http://172.16.3.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
172.16.3.1
</a> port 32802<br>Finished request 0<br><br><br><br><br>radiusd.conf:<br><br><br>
</div></blockquote></div><br>