Re : Off-topic: DHCP server with radius support
Slightly off-topic. Is anyone aware of a DHCP server with radius support. Or even just with exec support? I 'd like to setup a DHPC that will ask a radius server for IP instead of assigning it itself A radius server assigning IPs .......that is not radius (!) . May be you mean the radius server authenticating (MACs and/or IPs) before the dhcp assigns it; this you have to configure and write your own scripts on the dhcp server to authenticate against the radius. Radius is for AAA ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : Kostas Kalevras <kkalev@noc.ntua.gr> À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Envoyé le : Mercredi, 20 Juin 2007, 14h18mn 09s Objet : Off-topic: DHCP server with radius support Slightly off-topic. Is anyone aware of a DHCP server with radius support. Or even just with exec support? I 'd like to setup a DHPC that will ask a radius server for IP instead of assigning it itself -- Kostas Kalevras - Network Operations Center National Technical University of Athens http://kkalev.wordpress.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _____________________________________________________________________________ Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail
Eshun Benjamin wrote:
Slightly off-topic. Is anyone aware of a DHCP server with radius support. Or even just with exec support? I 'd like to setup a DHPC that will ask a radius server for IP instead of assigning it itself
A radius server assigning IPs .......that is not radius (!) . May be you mean the radius server authenticating (MACs and/or IPs) before the dhcp assigns it; this you have to configure and write your own scripts on the dhcp server to authenticate against the radius. Radius is for AAA
And DHCP doesn't fit into those A's just as neatly as RADIUS ? Ok the authentication aspect is a bit iffy, but theres definitely authorisation and accounting going on ;) -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900
O/H Eshun Benjamin έγραψε:
Slightly off-topic. Is anyone aware of a DHCP server with radius support. Or even just with exec support? I 'd like to setup a DHPC that will ask a radius server for IP instead of assigning it itself
A radius server assigning IPs .......that is not radius (!) . May be you mean the radius server authenticating (MACs and/or IPs) before the dhcp assigns it; this you have to configure and write your own scripts on the dhcp server to authenticate against the radius. Radius is for AAA No i meant exactly what i wrote. RADIUS can assign IP's (that's why we have the rlm_pool/rlm_sqlpool modules and the Framed-IP-Address attribute). I need to forward some information to home radius servers first and based on their response decide on the ip pool to give out IP's. Moreover, i need the extensibility and features of freeradius in my setup. I could provide you with the exact details of what i 'd like to achieve but they 're not important for the question asked.A DHCP request can be transformed to an Acesss-Request (with some default password), forwarded to a RADIUS server and the IP assigned by the radius server returned back to the user.
================================================== Benjamin K. Eshun
----- Message d'origine ---- De : Kostas Kalevras <kkalev@noc.ntua.gr> À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Envoyé le : Mercredi, 20 Juin 2007, 14h18mn 09s Objet : Off-topic: DHCP server with radius support
Slightly off-topic. Is anyone aware of a DHCP server with radius support. Or even just with exec support? I 'd like to setup a DHPC that will ask a radius server for IP instead of assigning it itself
-- Kostas Kalevras - Network Operations Center National Technical University of Athens http://kkalev.wordpress.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------------------------------------------------ Ne gardez plus qu'une seule adresse mail ! Copiez vos mails <http://www.trueswitch.com/yahoo-fr/> vers Yahoo! Mail ------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Kostas Kalevras - Network Operations Center National Technical University of Athens http://kkalev.wordpress.com
On Thu 21 Jun 2007, Kostas Kalevras wrote:
O/H Eshun Benjamin έγραψε:
Slightly off-topic. Is anyone aware of a DHCP server with radius support. Or even just with exec support? I 'd like to setup a DHPC that will ask a radius server for IP instead of assigning it itself
A radius server assigning IPs .......that is not radius (!) . May be you mean the radius server authenticating (MACs and/or IPs) before the dhcp assigns it; this you have to configure and write your own scripts on the dhcp server to authenticate against the radius. Radius is for AAA
No i meant exactly what i wrote. RADIUS can assign IP's (that's why we have the rlm_pool/rlm_sqlpool modules and the Framed-IP-Address attribute). I need to forward some information to home radius servers first and based on their response decide on the ip pool to give out IP's. Moreover, i need the extensibility and features of freeradius in my setup. I could provide you with the exact details of what i 'd like to achieve but they 're not important for the question asked.A DHCP request can be transformed to an Acesss-Request (with some default password), forwarded to a RADIUS server and the IP assigned by the radius server returned back to the user.
This is a logical integration, and something that I think would be very useful. :-) Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
Something like: http://tools.ietf.org/html/rfc4014 Ivan Kalik Kalik Informatika ISP Dana 21/6/2007, "Peter Nixon" <listuser@peternixon.net> piše:
On Thu 21 Jun 2007, Kostas Kalevras wrote:
O/H Eshun Benjamin ÎÎłĎÎąĎÎľ:
Slightly off-topic. Is anyone aware of a DHCP server with radius support. Or even just with exec support? I 'd like to setup a DHPC that will ask a radius server for IP instead of assigning it itself
A radius server assigning IPs .......that is not radius (!) . May be you mean the radius server authenticating (MACs and/or IPs) before the dhcp assigns it; this you have to configure and write your own scripts on the dhcp server to authenticate against the radius. Radius is for AAA
No i meant exactly what i wrote. RADIUS can assign IP's (that's why we have the rlm_pool/rlm_sqlpool modules and the Framed-IP-Address attribute). I need to forward some information to home radius servers first and based on their response decide on the ip pool to give out IP's. Moreover, i need the extensibility and features of freeradius in my setup. I could provide you with the exact details of what i 'd like to achieve but they 're not important for the question asked.A DHCP request can be transformed to an Acesss-Request (with some default password), forwarded to a RADIUS server and the IP assigned by the radius server returned back to the user.
This is a logical integration, and something that I think would be very useful. :-)
Cheers --
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
That RFC actually describes the opposite of what we are talking about. (ie. How a RADIUS server can ask a DHCP server to assign an IP instead of how a DHCP server can ask a RADIUS server to assign an IP) Cheers Peter On Thu 21 Jun 2007, tnt@kalik.co.yu wrote:
Something like:
http://tools.ietf.org/html/rfc4014
Ivan Kalik Kalik Informatika ISP
Dana 21/6/2007, "Peter Nixon" <listuser@peternixon.net> piše:
On Thu 21 Jun 2007, Kostas Kalevras wrote:
O/H Eshun Benjamin ÎÎłĎÎąĎÎľ:
Slightly off-topic. Is anyone aware of a DHCP server with radius support. Or even just with exec support? I 'd like to setup a DHPC that will ask a radius server for IP instead of assigning it itself
A radius server assigning IPs .......that is not radius (!) . May be you mean the radius server authenticating (MACs and/or IPs) before the dhcp assigns it; this you have to configure and write your own scripts on the dhcp server to authenticate against the radius. Radius is for AAA
No i meant exactly what i wrote. RADIUS can assign IP's (that's why we have the rlm_pool/rlm_sqlpool modules and the Framed-IP-Address attribute). I need to forward some information to home radius servers first and based on their response decide on the ip pool to give out IP's. Moreover, i need the extensibility and features of freeradius in my setup. I could provide you with the exact details of what i 'd like to achieve but they 're not important for the question asked.A DHCP request can be transformed to an Acesss-Request (with some default password), forwarded to a RADIUS server and the IP assigned by the radius server returned back to the user.
This is a logical integration, and something that I think would be very useful. :-)
-- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
tnt@kalik.co.yu wrote:
Something like:
Which requires support in the access points, and therefore isn't implemented anywhere. Alan DeKok.
Eshun Benjamin wrote: ...
A radius server assigning IPs .......that is not radius (!) .
RADIUS was *originally* intented to assign IP's. It's been doing that since at least 1993.
May be you mean the radius server authenticating (MACs and/or IPs) before the dhcp assigns it; this you have to configure and write your own scripts on the dhcp server to authenticate against the radius. Radius is for AAA
ISC DHCP supports scripts? News to me... Alan DeKok.
participants (6)
-
Alan DeKok -
Arran Cudbard-Bell -
Eshun Benjamin -
Kostas Kalevras -
Peter Nixon -
tnt＠kalik.co.yu