lists.freeradius.org
Sign In Sign Up
Manage this list Sign In Sign Up

Keyboard Shortcuts

Thread View

  • j: Next unread message
  • k: Previous unread message
  • j a: Jump to all threads
  • j l: Jump to MailingList overview
thread

None

Simon Earthrowl

18 Feb 2009 18 Feb '09
5:45 a.m.

Hi, I am trying to configure free radius to work with our 28 NASs. These NASs are split into two groups, at different locations (equal split 14-14). ll NASs report NAS-IP-Address correctly (ie uniquely) Any device requesting authentication randomly connects to any one of the 28 NASs. All devices are unique, and Calling-Station-ID is used to uniquely identify every device. There is no possible chance of multiple instances connecting Some devices *may* require require PAP/CHAP -- the default being ignore User-Name etc. This is configured on a device by device basis. Devices may require an alternative configuration using Called-Station-ID Furthermore, I wish to use MySQL, so that I can add new provisioned devices auto-magically, without needing to tell the radius server. I've a freshly compiled version 2.1.3, running on CentOS 5.3 -- That was by far the easiest bit! Many thanks for that. *Now the problem....* Each set of NASs requires a different Framed-IP-Address pool eg 10.0.0.0/24 for site1, and 10.8.0.0/24 for site2 with Called-Station-Id = domain.com, and 192.168.110.0/26 for site1, and 192.168.110.128/26 for site2 with Called-Station-Id = domain.co.uk I'm using sqlippool to supply the IP. *What I've tried.....* Pool-name : I've set this in huntgroups, hints, clients.conf with no success whatsoever. Pool-Name: In netgroups -- performace was too slow, as I need 28 groups per device! Virtual-Servers: I just don't get these. The README suggests I don't need a listen clause, the debug output suggests I do. I'm concerned that if I go down this route, I'll end up with slow responses again *Where I've got to:* I'm using radcheck table with the Sql-Name set to Calling-Station-ID, with Auth-Type := Accept (for the default case), and adding User-Name & password checking for specific PAP/CHAP authentication. *What I need please* Easiest: A fix, so I can set Pool-Name in clients.conf, or hints, that works in sqlippool. Intermediate: Another strategy that will scale (not 28 groups per device) Or Advanced: A far better understanding of where, and how, I can use unlang, and be able to calculate Pool-Name within a context such that sqlippool will corectly allocate an IP address. Many thanks in anticipation for help/suggestions being offered kind regards Simon

Attachments:

  • attachment.html (text/html — 2.9 KB)
0 0
Reply
Sign in to reply online Use email software

Back to the thread

Back to the list

HyperKitty Powered by HyperKitty version 1.3.12.