Hi, Is it possible to ignore framed ip adress if it's in a specific IP address range? Before it is being processed in the accounting/pre accounting? Thanks.
Hi, In my case I want to remove all the APIPA range from being sent to all firewalls. Regards, Pizu On Tue, 10 Aug 2021 at 02:08, Pizu <pizpower@gmail.com> wrote:
Hi,
Is it possible to ignore framed ip adress if it's in a specific IP address range? Before it is being processed in the accounting/pre accounting?
Thanks.
On Aug 10, 2021, at 7:39 AM, Pizu <pizpower@gmail.com> wrote:
In my case I want to remove all the APIPA range from being sent to all firewalls.
I don't know what that means. You're assuming that we're familiar with your current system. We're not. Please explain what you're doing in detail. What is coming in to the server? What part do you want modified? What do you want the server to reply with? Alan DeKok.
Hi, Apipa is an IP address range of the DHCP 169.254.0.0/16 when a DHCP fails to send an IP address to the client. If a PC/laptop that is connected to a Cisco switch doesn't get an IP address from the DHCP, an IP address from apipa will be assigned automatically on the host. The Cisco will still forward the framed IP address to the radius and I want to ignore it, is it possible? Thanks. On Tue, 10 Aug 2021, 15:20 Alan DeKok, <aland@deployingradius.com> wrote:
On Aug 10, 2021, at 7:39 AM, Pizu <pizpower@gmail.com> wrote:
In my case I want to remove all the APIPA range from being sent to all firewalls.
I don't know what that means.
You're assuming that we're familiar with your current system. We're not.
Please explain what you're doing in detail. What is coming in to the server? What part do you want modified? What do you want the server to reply with?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Aug 10, 2021, at 3:30 PM, Pizu <pizpower@gmail.com> wrote:
Apipa is an IP address range of the DHCP 169.254.0.0/16 when a DHCP fails to send an IP address to the client.
OK.
If a PC/laptop that is connected to a Cisco switch doesn't get an IP address from the DHCP, an IP address from apipa will be assigned automatically on the host. The Cisco will still forward the framed IP address to the radius and I want to ignore it, is it possible?
Again, I don't know what you mean by "ignore" the IP address. Please describe in *detail* what you want to happen. Don't keep saying "ignore". Describe things using technical terms. i.e. what part of the system does what, exactly? Alan DeKok.
Well, the APIPA address is configured automatically by the client (e.g: OSX, Windows, Linux/NetworkManager)…. Not determined by the DHCP-Server.
Therefore if it is being forwarded and you can see that IP range during the post-auth{}, you could use the
…
post-auth {
…
If (&Framed-IP-Address =~ /^169\.254\./) {
update reply {
&Framed-IP-Address !* ANY
}
}
...
}
….
--
Jorge Pereira
jpereira@freeradius.org
> On 10 Aug 2021, at 16:30, Pizu <pizpower@gmail.com> wrote:
>
> Hi,
>
> Apipa is an IP address range of the DHCP 169.254.0.0/16 when a DHCP fails
> to send an IP address to the client.
>
> If a PC/laptop that is connected to a Cisco switch doesn't get an IP
> address from the DHCP, an IP address from apipa will be assigned
> automatically on the host. The Cisco will still forward the framed IP
> address to the radius and I want to ignore it, is it possible?
>
> Thanks.
>
> On Tue, 10 Aug 2021, 15:20 Alan DeKok, <aland@deployingradius.com> wrote:
>
>> On Aug 10, 2021, at 7:39 AM, Pizu <pizpower@gmail.com> wrote:
>>> In my case I want to remove all the APIPA range from being sent to all
>>> firewalls.
>>
>> I don't know what that means.
>>
>> You're assuming that we're familiar with your current system. We're not.
>>
>> Please explain what you're doing in detail. What is coming in to the
>> server? What part do you want modified? What do you want the server to
>> reply with?
>>
>> Alan DeKok.
>>
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
Thanks, will test it out.
Regards,
Pizu
On Wed, 11 Aug 2021 at 02:17, Jorge Pereira <jpereira@freeradius.org> wrote:
>
> Well, the APIPA address is configured automatically by the client (e.g:
> OSX, Windows, Linux/NetworkManager)…. Not determined by the DHCP-Server.
> Therefore if it is being forwarded and you can see that IP range during
> the post-auth{}, you could use the
>
> …
> post-auth {
> …
> If (&Framed-IP-Address =~ /^169\.254\./) {
> update reply {
> &Framed-IP-Address !* ANY
> }
> }
> ...
> }
> ….
>
> --
> Jorge Pereira
> jpereira@freeradius.org
>
>
>
>
> > On 10 Aug 2021, at 16:30, Pizu <pizpower@gmail.com> wrote:
> >
> > Hi,
> >
> > Apipa is an IP address range of the DHCP 169.254.0.0/16 when a DHCP
> fails
> > to send an IP address to the client.
> >
> > If a PC/laptop that is connected to a Cisco switch doesn't get an IP
> > address from the DHCP, an IP address from apipa will be assigned
> > automatically on the host. The Cisco will still forward the framed IP
> > address to the radius and I want to ignore it, is it possible?
> >
> > Thanks.
> >
> > On Tue, 10 Aug 2021, 15:20 Alan DeKok, <aland@deployingradius.com>
> wrote:
> >
> >> On Aug 10, 2021, at 7:39 AM, Pizu <pizpower@gmail.com> wrote:
> >>> In my case I want to remove all the APIPA range from being sent to all
> >>> firewalls.
> >>
> >> I don't know what that means.
> >>
> >> You're assuming that we're familiar with your current system. We're
> not.
> >>
> >> Please explain what you're doing in detail. What is coming in to the
> >> server? What part do you want modified? What do you want the server to
> >> reply with?
> >>
> >> Alan DeKok.
> >>
> >>
> >> -
> >> List info/subscribe/unsubscribe? See
> >> http://www.freeradius.org/list/users.html
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Jorge Pereira -
Pizu