On 12/08/2019, at 11:47 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Aug 11, 2019, at 9:24 PM, Maile Halatuituia <maile.halatuituia@tcc.to> wrote:
Actually I was referring to the PPPoE like Authentication and you have confirmed DHCP does not do the same.
Any idea how I would achieve at least similar to PPPoE. I mean is it possible to authenticate DHCP clients before assigning the Address. I mean similar to what PPP does with Freeradius on PPPoE.
On Cisco devices, this is "mac auth". You need to configure the Cisco NAS to do Mac auth. There's also a guide in the FreeRADIUS Wiki for configuring Mac Auth on the server.
Hi Alan, I think what he’s wanting to do, based on other ML threads, is more “ISG” on a BNG. This takes DHCP DISCOVER messages, and talks to RADIUS to authenticate them based on whatever - usually option 82 information - and passes back confusing Cisco AVPs with terrible confusing names to tweak what the BNG does. https://lists.gt.net/cisco/nsp/201724 <https://lists.gt.net/cisco/nsp/201724> etc. There are links to the relevant Cisco documents etc. there. Maile - email me off list if you like and I can give you a steer on some of this stuff. -- Nathan Ward