Hi,<br>I wana use freeradius to dynamically assign ip to my vpn clients.<br>so I defined an ip pool with the range of <a href="http://10.3.3.1">10.3.3.1</a> to <a href="http://10.3.3.255">10.3.3.255</a>,<br>with the radtest command , I'm getting the the ip in answer but while trying to connect from vpn client and at the same time looking the debug mod output there's no ip returned in answer.
<br><br>radtest:<br><br>radtest new3 new3 localhost 1685 testing123<br><br>Sending Access-Request of id 8 to <a href="http://127.0.0.1">127.0.0.1</a> port 1812<br> User-Name = "new3"<br> User-Password = "new3"
<br> NAS-IP-Address = <a href="http://255.255.255.255">255.255.255.255</a><br> NAS-Port = 1685<br>rad_recv: Access-Accept packet from host <a href="http://127.0.0.1:1812">127.0.0.1:1812</a>, id=8, length=32<br>
Framed-IP-Address = <a href="http://10.3.3.91">10.3.3.91</a><br> Framed-IP-Netmask = <a href="http://255.255.255.255">255.255.255.255</a><br><br><br><br>debug mod:<br><br>rad_recv: Access-Request packet from host
<a href="http://127.0.0.1:33802">127.0.0.1:33802</a>, id=99, length=146<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> User-Name = "new3"<br> MS-CHAP-Challenge = 0x9dbdf0a41b6c569d8565b6813f9ae9e2
<br> MS-CHAP2-Response = 0xbf00403c6176c9e7b825fc6332f4ecbb5c8a00000000000000000a65a6f35ab28326cf016a4c0636a167d0213b2d4d161cf9<br> Calling-Station-Id = "<a href="http://85.15.42.219">85.15.42.219</a>"
<br> NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br> NAS-Port = 1<br> Processing the authorize section of radiusd.conf<br>modcall: entering group authorize for request 1<br> modcall[authorize]: module "preprocess" returns ok for request 1
<br> modcall[authorize]: module "chap" returns noop for request 1<br> rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap'<br> modcall[authorize]: module "mschap" returns ok for request 1
<br> rlm_realm: No '@' in User-Name = "new3", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "suffix" returns noop for request 1<br> rlm_eap: No EAP-Message, not doing EAP
<br> modcall[authorize]: module "eap" returns noop for request 1<br> users: Matched entry DEFAULT at line 173<br> users: Matched entry DEFAULT at line 185<br> modcall[authorize]: module "files" returns ok for request 1
<br>radius_xlat: 'new3'<br>rlm_sql (sql): sql_set_user escaped user --> 'new3'<br>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'new3' ORDER BY id'
<br>rlm_sql (sql): Reserving sql socket id: 3<br>radius_xlat: 'SELECT <a href="http://radgroupcheck.id">radgroupcheck.id</a>,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE
usergroup.Username = 'new3' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY <a href="http://radgroupcheck.id">radgroupcheck.id</a>'<br>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'new3' ORDER BY id'
<br>radius_xlat: 'SELECT <a href="http://radgroupreply.id">radgroupreply.id</a>,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username
= 'new3' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY <a href="http://radgroupreply.id">radgroupreply.id</a>'<br>rlm_sql (sql): Released sql socket id: 3<br> modcall[authorize]: module "sql" returns ok for request 1
<br>rlm_pap: Found existing Auth-Type, not changing it.<br> modcall[authorize]: module "pap" returns noop for request 1<br>modcall: leaving group authorize (returns ok) for request 1<br> rad_check_password: Found Auth-Type MS-CHAP
<br>auth: type "MS-CHAP"<br> Processing the authenticate section of radiusd.conf<br>modcall: entering group MS-CHAP for request 1<br> rlm_mschap: Told to do MS-CHAPv2 for new3 with NT-Password<br>rlm_mschap: adding MS-CHAPv2 MPPE keys
<br> modcall[authenticate]: module "mschap" returns ok for request 1<br>modcall: leaving group MS-CHAP (returns ok) for request 1<br> Processing the post-auth section of radiusd.conf<br>modcall: entering group post-auth for request 1
<br>rlm_ippool: Searching for an entry for nas/port: <a href="http://127.0.0.1/1">127.0.0.1/1</a><br>rlm_ippool: Found Framed-IP-Address attribute in reply attribute list.<br>rlm_ippool: override is set to no. Return NOOP.
<br> modcall[post-auth]: module "main_pool" returns noop for request 1<br>rlm_sql (sql): Processing sql_postauth<br>radius_xlat: 'new3'<br>rlm_sql (sql): sql_set_user escaped user --> 'new3'
<br>radius_xlat: 'INSERT into radpostauth (user, pass, reply, date) values ('new3', 'Chap-Password', 'Access-Accept', NOW())'<br>rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (user, pass, reply, date) values ('new3', 'Chap-Password', 'Access-Accept', NOW())
<br>rlm_sql (sql): Reserving sql socket id: 2<br>rlm_sql (sql): Released sql socket id: 2<br> modcall[post-auth]: module "sql" returns ok for request 1<br>modcall: leaving group post-auth (returns ok) for request 1
<br>Sending Access-Accept of id 99 to <a href="http://127.0.0.1">127.0.0.1</a> port 33802<br> Framed-IP-Address = <a href="http://255.255.255.254">255.255.255.254</a><br> Framed-MTU = 576<br> Service-Type = Framed-User
<br> Framed-Protocol = PPP<br> Framed-Compression = Van-Jacobson-TCP-IP<br> MS-CHAP2-Success = 0xbf533d39463644384641333530454543384532453141324231444532453443333036333538323435303646<br> MS-MPPE-Recv-Key = 0x6bf743cc4d6fcdfe9ca3db2ffa091f2d
<br> MS-MPPE-Send-Key = 0xf7c1c3f1197d3b3637982d14423a98de<br> MS-MPPE-Encryption-Policy = 0x00000001<br> MS-MPPE-Encryption-Types = 0x00000006<br>Finished request 1<br>Going to the next request<br>--- Walking the entire request list ---
<br>Waking up in 6 seconds...<br>--- Walking the entire request list ---<br>Cleaning up request 1 ID 99 with timestamp 475e1954<br>Nothing to do. Sleeping until we see a request.<br><br>