Hi Arran, Thanks I'll try this. Our previous requests arrive directly from the mobile network, but this new APN is proxied by Vodafone's NAS. Perhaps this was not included because requests sent by proxy.
Add this to authorize Just checking if this should this be set in sites-enabled/default in the authorize section or should this be placed in another file?
e.g with the update request appended, authorize { preprocess chap digest eap { ok = return } files sql expiration logintime pap update request { NAS-IP-Address = "%{Packet-Src-IP-Address}" } } Sophie. On 9/16/2015 10:28 AM, Arran Cudbard-Bell wrote:
On 16 Sep 2015, at 09:03, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Hi Alan,
Is the IP for that APN listed there? We don't have IP addresses for our private APNs assigned initially. Our Radius assigns the IP address not the mobile provider. The connection comes in over from Vodafone and their Radius proxies the request to our Radius server, which then DHCP an IP addresses.
What is the IP? Radius has to assign the IP address, but cannot because it did not find a matching Pool-Name. This is the problem.
So... what's on line 228? Line 228 in /etc/raddb/users has this entry: DEFAULT Framed-IP-Netmask = 255.255.255.255
The entire /etc/raddb/users contains this, DEFAULT NAS-IP-Address == 172.100.200.1, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.54, Pool-Name := vodafone DEFAULT NAS-IP-Address == 10.123.255.254, Pool-Name := proximus-carli DEFAULT NAS-IP-Address == 10.124.255.254, Pool-Name := proximus-mechelen DEFAULT Framed-IP-Netmask = 255.255.255.255
( IP address obfuscated a bit )
= '%{NAS-IP-Address}' -> Your NAS isn't sending the NAS-IP-Address attribute
Add this to authorize
update request { NAS-IP-Address = "%{Packet-Src-IP-Address}" }
That will add the attribute if not already present, with the value of the src IP field in the IP header.
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html