On 03/01/2013 04:12 PM, Alan DeKok wrote:
Can you supply the debug output?
When set that freeradius sends IP, NETMASK, DNS... WITHOUT DEFAULT GATEWAY:

This packet is sent to RELAY_IP

$RAD_REPLY{'DHCP-Gateway-IP-Address'} NOT SENT
---------------------------------------------------------------------------
  TIME: 09:46:24.886544
    OP: 2 (BOOTPREPLY)
 HTYPE: 1 (Ethernet)
  HLEN: 6
  HOPS: 1
  SECS: 0
 FLAGS: 0
CIADDR: 0.0.0.0
YIADDR: CPE_PUBLIC_IP
SIADDR: RADIUS_IP
GIADDR: PRIVATE_RELAY_IP
CHADDR: **:**:**:**:**:**:00:00:00:00:00:00:00:00:00:00
 SNAME: .
 FNAME: .
OPTION:  53 (  1) DHCP message type         2 (DHCPOFFER)
OPTION:   1 (  4) Subnet mask               255.255.255.240
OPTION:   2 (  4) Time offset               7200 (2h)
OPTION:   3 (  4) Routers                   RELAY_PRIVATE_IP
OPTION:   6 (  4) DNS server                DNS_IP
OPTION:  12 ( 17) Host name                 HOST_MAC_ADDRESS
OPTION:  15 (  8) Domainname                DOMAIN
OPTION:  51 (  4) IP address leasetime      7200 (2h)
OPTION:  54 (  4) Server identifier         RADIUS_IP
OPTION:  57 (  2) Maximum DHCP message size 1500

####################################################

When set that freeradius sends IP, NETMASK, DNS... WITH DEFAULT GATEWAY:

This packet is sent to GIADDR, whis is wrong!!!

$RAD_REPLY{'DHCP-Gateway-IP-Address'} SENT
---------------------------------------------------------------------------
  TIME: 09:46:24.886544
    OP: 2 (BOOTPREPLY)
 HTYPE: 1 (Ethernet)
  HLEN: 6
  HOPS: 1
  SECS: 0
 FLAGS: 0
CIADDR: 0.0.0.0
YIADDR: CPE_PUBLIC_IP
SIADDR: RADIUS_IP
GIADDR: $RAD_REPLY{'DHCP-Gateway-IP-Address'}
CHADDR: **:**:**:**:**:**:00:00:00:00:00:00:00:00:00:00
 SNAME: .
 FNAME: .
OPTION:  53 (  1) DHCP message type         2 (DHCPOFFER)
OPTION:   1 (  4) Subnet mask               255.255.255.240
OPTION:   2 (  4) Time offset               7200 (2h)
OPTION:   3 (  4) Routers                   RELAY_PRIVATE_IP
OPTION:   6 (  4) DNS server                DNS_IP
OPTION:  12 ( 17) Host name                 HOST_MAC_ADDRESS
OPTION:  15 (  8) Domainname                DOMAIN
OPTION:  51 (  4) IP address leasetime      7200 (2h)
OPTION:  54 (  4) Server identifier         RADIUS_IP
OPTION:  57 (  2) Maximum DHCP message size 1500

So, when freeradius sees DHCP-Gateway-IP-Address inside reply offer he uses it as destination where to send reply which is wrong. He should use RELAY IP instead no matter what's inside BOOTREPLY.