Re: two or more ippool

6 Oct 2006

      -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thanks for reply.

I can't subdivide in two groups ...
I need 1 group, with several pools ...

Thanks
- ----------------------------
Roberto Gonzalez Azevedo

Jan Mulders wrote:
...
You're using the wrong syntax for including the pools in each section.
Here's an example from my own config...
modules {
       ippool 512k_high {
#  range-start,range-stop: The start and end ip
               #  addresses for the ip pool
               range-start =x.x.x.6
               range-stop =x.x.x.66
#  netmask: The network mask used for the ip's
               netmask = 255.255.255.0
#  cache-size: The gdbm cache size for the db
               #  files. Should be equal to the number of ip's
               #  available in the ip pool
               cache-size = 60
# session-db: The main db file used to allocate ip's to
clients
               session-db = ${raddbdir}/ippool.512k_high
# ip-index: Helper db index file used in multilink
               ip-index = ${raddbdir}/ipindex.512k_high
# override: Will this ippool override a
Framed-IP-Address already set
               override = no
# maximum-timeout: If not zero specifies the maximum
time in seconds an
               # entry may be active. Default: 0
               maximum-timeout = 0
       }
ippool 512k_low {
...................
instantiate {
}
authorize {
               preprocess
               sql
}
authenticate {
               pap
}
preacct {
               preprocess
}
accounting {l
               radutmp
               512k_high
               512k_low
               10m_high
               10m_low
               sql
}
session {
               radutmp
               sql
}
post-auth {
               sql
               512k_high
               512k_low
               10m_high
               10m_low
}
Also, I notice that 'mygroup' has IP assignments from 2 pools. This
can't work, because RADIUS will just select the first one it gets from
MySQL. May I suggest either subdividing your users into two groups, or
merging the two groups?
Hope this helps,
Jan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFJsW3F+EMwkXLsEwRAvBWAJ9gCqSst7b9rwLCHhb3f/PO91jFSgCfcKRv
V5wK1k3//j5PcVBqOte5FAc=
=xw2T
-----END PGP SIGNATURE-----