Yes, of course thanks Allan, just had to confirm there was not any provision in place, although I already suspected what would the answer would be.

The point is that I worked for some years in the Internet cable industry and I dearly miss some of the controls there were in place, like the equipment placing leasequeries calls to the DHCP server to confirm the validity of a new IP from a customer, for instance.

About SQL, there used to be also a patched DHCP+TFTP package  with an eye in the cable industry, called docsis-server. It was also very convenient interesting in that it mapped the isc-dhcp configuration to well, MySQL tables, simplifying a lot the development of glue software for customer provisioning. I used it at least in two sites, until giving up on it because it was too old and stopped being maintained. You might want to have a look at it.

Regards,
Rui Ribeiro
http://www.linkedin.com/pub/rui-ribeiro/16/ab8/434


Message: 4
Date: Mon, 14 Apr 2014 21:16:15 -0400
From: Alan DeKok <aland@deployingradius.com>
To: FreeRadius users mailing list
        <freeradius-users@lists.freeradius.org>
Subject: Re: FreeRADIUS DHCP service vs IP users control
Message-ID: <534C885F.3070309@deployingradius.com>
Content-Type: text/plain; charset=UTF-8

Rui Ribeiro wrote:
> We have noticed that at least in one of our equipments the users can
> gain access with a fixed-ip-address instead of one gotten via our
> DHCP-server.

  That's how DHCP works.  If the user doesn't do DHCP, he can use a
static IP of his choosing.

> Whilst my ISP experience suggest the enforcement of DHCP-only clients
> belongs to the hardware side, since FreeRadius also implements the DHCP
> service, I am curious wether someone managed to enforce this via
> FreeRadius configurations.

  You can't enforce anything with DHCP.  Like RADIUS, it just advises
the NAS.  If the NAS (or the user) ignores DHCP or RADIUS, there's very
little you can do on the server.

  What you *can* do is use RADIUS accounting packets to double-check
users IP addresses.  If the address in the accounting packet was *not*
assigned by DHCP, then you can do something.  Complain, issue email, etc.

  And which open source DHCP server lets you write IPs into an SQL
database?  Not ISC.  FreeRADIUS. :)

  That's why we added DHCP.

  Alan DeKok.