Framed-Pool precedence over Framed-IP-Address
In a older freeradius version I configure Framed-IP-Address for a username and that username get a ip address to network access. If I would like to block that username and I just change the username to access_deny group that have a Framed-Pool atribute. So my NAS can handle it and set a payment page to my user. But now I upgrade my freeradius server and it is not working anymore. Now Framed-IP-Address is taking precedence over Framed-Pool. For it to worki I need to delete the Framed-IP-Address attribute. Is there any way to be like before? If I have Framed-IP-Address and Framed-Pool together I would like to use Framed-Pool. radusergroup +----------+---------------+----------+ | username | groupname | priority | +----------+---------------+----------+ | test | access_deny | 1 | +----------+---------------+----------+ radgroupreply +-----+---------------+-------------+----+----------------+ | id | groupname | attribute | op | value | +-----+---------------+-------------+----+----------------+ | 422 | access_deny | Framed-Pool | := | access_deny_pool | radreply +--------+----------+-------------------+----+-------------+ | id | username | attribute | op | value | +--------+----------+-------------------+----+-------------+ | 121896 | test | Framed-IP-Address | := | xx.xx.0.5 | +--------+----------+-------------------+----+-------------+
Sorry, the behaviour was the same. "If Framed-IP-Address is specified,Framed-Pool is ignored (RFC2865)" The Framed-IP-Address was being deleted in the older version too ;-) On Tue, Apr 11, 2017 at 11:32 AM, HugLeo <hugocanalli@gmail.com> wrote:
In a older freeradius version I configure Framed-IP-Address for a username and that username get a ip address to network access.
If I would like to block that username and I just change the username to access_deny group that have a Framed-Pool atribute. So my NAS can handle it and set a payment page to my user.
But now I upgrade my freeradius server and it is not working anymore.
Now Framed-IP-Address is taking precedence over Framed-Pool. For it to worki I need to delete the Framed-IP-Address attribute.
Is there any way to be like before? If I have Framed-IP-Address and Framed-Pool together I would like to use Framed-Pool.
radusergroup +----------+---------------+----------+ | username | groupname | priority | +----------+---------------+----------+ | test | access_deny | 1 | +----------+---------------+----------+
radgroupreply +-----+---------------+-------------+----+----------------+ | id | groupname | attribute | op | value | +-----+---------------+-------------+----+----------------+ | 422 | access_deny | Framed-Pool | := | access_deny_pool |
radreply +--------+----------+-------------------+----+-------------+ | id | username | attribute | op | value | +--------+----------+-------------------+----+-------------+ | 121896 | test | Framed-IP-Address | := | xx.xx.0.5 | +--------+----------+-------------------+----+-------------+
On Apr 11, 2017, at 4:32 PM, HugLeo <hugocanalli@gmail.com> wrote:
In a older freeradius version I configure Framed-IP-Address for a username and that username get a ip address to network access.
If I would like to block that username and I just change the username to access_deny group that have a Framed-Pool atribute. So my NAS can handle it and set a payment page to my user.
But now I upgrade my freeradius server and it is not working anymore.
You upgraded from what version to what other version? And what did you change when you upgraded?
Now Framed-IP-Address is taking precedence over Framed-Pool. For it to worki I need to delete the Framed-IP-Address attribute.
Is there any way to be like before? If I have Framed-IP-Address and Framed-Pool together I would like to use Framed-Pool.
As always, read the debug output to see what the server is doing. And see "man unlang", or the SQL module documentation on http://wiki.freeradius.org. The server behavior follows the documentation. If the server isn't doing what you want, it's probably because you're telling it to do the wrong thing. Alan DeKok.
participants (2)
-
Alan DeKok -
HugLeo