Cisco LNS with Freeradius and MySQL
Hi I request a small help for my configuration, sorry for my english: I have a cisco router with VRF I have a Freeradius server with sql I have a lot of Adsl user in L2TP. I want add one user to a specific vrf, i have added to the mysql table: INSERT INTO `radgroupreply` VALUES (9, 'IAccess', 'cisco-avpair', '+=', '"lcp:interface-config=ip vrf forwarding INT002\\n ip unnumbered Loopback250"'); but when the user connect, that's don't work ... On my cisco router, i have: One Loopback: interface Loopback250 ip vrf forwarding INT002 no ip address One Vrf: ip vrf INT002 rd 65509:501 route-target export 65509:101 route-target import 65509:100 route-target import 65509:50 where is my error ? Second question: I use sqlippool for dynamic IP, if i want specify a IP to a username (static) what is the process ? create a specific group ? thanks for your help stephane
On 10/18/2010 06:07 PM, Stephane MAGAND wrote:
but when the user connect, that's don't work ...
See the FAQ for "it doesn't work".
Second question: I use sqlippool for dynamic IP, if i want specify a IP to a username (static) what is the process ? create a specific group ?
You can assign an IP manually, and sqlippool will see this and do nothing. For example: authorize { ... files ... } post-auth { ... sqlippool } ...and in "/etc/raddb/users": specialuser1 Framed-IP-Address := a.b.c.d otheruser2 Framed-IP-Address := e.f.g.h You can use any FreeRadius module (SQL, rlm_passwd) to do this. Another example: post-auth { update control { Tmp-IP-Address-0 = "%{sql:select staticip from mytable where ...}" } if (control:Tmp-IP-Address-0) { update reply { Framed-IP-Address := "%{control:Tmp-IP-Address-0}" } } else { sqlippool } }
2010/10/18 Phil Mayers <p.mayers@imperial.ac.uk>:
On 10/18/2010 06:07 PM, Stephane MAGAND wrote:
but when the user connect, that's don't work ...
See the FAQ for "it doesn't work".
Thanks for your answer Phil, but i don't see in the FAQ a answer at my question. Do you create the VRF on the cisco ? Do you create the loopback on the cisco ? Do you put the Loopback into the vrf ? Bye Stephane
Ok i have resolved my problems ;=) 2010/10/18 Stephane MAGAND <stmagconsulting@gmail.com>:
2010/10/18 Phil Mayers <p.mayers@imperial.ac.uk>:
On 10/18/2010 06:07 PM, Stephane MAGAND wrote:
but when the user connect, that's don't work ...
See the FAQ for "it doesn't work".
Thanks for your answer Phil, but i don't see in the FAQ a answer at my question.
Do you create the VRF on the cisco ? Do you create the loopback on the cisco ? Do you put the Loopback into the vrf ?
Bye Stephane
On 10/18/2010 06:51 PM, Stephane MAGAND wrote:
2010/10/18 Phil Mayers<p.mayers@imperial.ac.uk>:
On 10/18/2010 06:07 PM, Stephane MAGAND wrote:
but when the user connect, that's don't work ...
See the FAQ for "it doesn't work".
I meant literally the FAQ item "It still doesn't work", which advises posting the debug output, but I see you've solved it now.
participants (2)
-
Phil Mayers -
Stephane MAGAND