Hi. I was afraid this would come out that way....Thanks for the response anyway, it prevent me to further useless research. I will have to hand-knit me this piece of code. A suggestion for v3 : It should be possible then to turn the simple dhcp request into 2 radius request : the auth request + the acct start request. Icing on the cake : dhcp-release should also transform into an acct stop. Best regards Fabrice De : aland@deployingradius.com A : freeradius-users@lists.freeradius.org Date : 08/08/2013 14:42 Objet : Re: Configuring the DHCP module to forward request to another Radius server. Envoyé par : freeradius-users-bounces+fabrice-externe.segura=erdfdistribution.fr@lists.freeradius.org Fabrice-externe SEGURA wrote:

I'm trying to use Freeradius 2.2.0 to catch DHCP request on a local network (a specific interface and physical network of my machine), and forward it to another radius server (through another interface), using the radius protocol, to get authorized, and get the IP address to respond with to the DHCP request.

It doesn't do that.

Any advice / idea ?

Substantial code changes. We're looking to do this as part of the v3 release cycle. But it requires major changes to the code. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

On 8 Aug 2013, at 16:45, Alan DeKok <aland@deployingradius.com> wrote:

Fabrice-externe SEGURA wrote:

...

A suggestion for v3 : It should be possible then to turn the simple dhcp request into 2 radius request : the auth request + the acct start request. Icing on the cake : dhcp-release should also transform into an acct stop.

That's a lot harder.

It's one of the uses of request fanout we've discussed before. One of the problems is handling the responses in a sane way. Do you refuse to response to the client unless you get an Accounting-Response for example.

As always, patches are welcome.

As a hack just use exec and radclient to generate the packets and feed them back into the server. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team

Hi. Your approach (use an external script) finally worked It's definitely a hack, as I discovered that Linuxes don't do any DHCP-Release (and I expected to send a radius acct stop at this point). Nevertheless, it will help me to emulate a mobile operator network behaviour, when a machine connects trhough a modem, with the same machine just connected locally on it's ethernet interface, and that's all I needed - Thanks a lot for the tip (not to mention the freeradius software itself) A word on documentation however : It's quite an understatement to say that it can be improved. Regards

Fabrice-externe SEGURA wrote:

A word on documentation however : It's quite an understatement to say that it can be improved.

We've had ~15 years of people complaining about this. So far, contributions have been sporadic. Doing documentation takes a concerted effort, and commitment. It's easy to complain. It's hard to do work. Alan DeKok.