Hi Freeradius users. I have compiled and installed the 1.1.0 version of Freeradius and made the basic configurations and everything works fine. Now I have 5 NAS boxes that is accessing the radius server the problem is that I want each NAS to use a set if ipadresses. So for NAS(1) the radius should return ippool(1) and so on. I have looked at the FAQ and have been searching in the mail archive for several hours and have only seen people asking about allocating ipadresses for specific user(s) or group(s) but not for a NAS. Could anyone please help me to get me started on this. Best Regards /Daniel Johansson Below is my NAS boxes in clients.conf # Client for RTP-RFTN, GGSN 1 client 192.168.9.1 { secret = xxx shortname = RTP-RFTN } # Client for S99, GGSN 249 client 192.168.15.249 { secret = xxx shortname = S99 GGSN 249 } # Client for S98, GGSN 254 client 192.168.13.254 { secret = xxx shortname = S98 GGSN 254 } # Client for GLANA, GGSN 250 client 192.168.11.250 { secret = xxx shortname = GLANA GGSN 250 } # Client for Telia GLANA, GGSN 249 client 192.168.11.249 { secret = xxx shortname = GLANA GGSN 249 }
"Johansson, Daniel" <Daniel.Johansson2@sonyericsson.com> wrote:
Now I have 5 NAS boxes that is accessing the radius server the problem is that I want each NAS to use a set if ipadresses.
So for NAS(1) the radius should return ippool(1) and so on.
That can be done.
I have looked at the FAQ and have been searching in the mail archive for several hours and have only seen people asking about allocating ipadresses for specific user(s) or group(s) but not for a NAS.
It's not in the FAQ or default config because it's a rare configuration. Instead, the documentation describes the pieces necessary to solve the problem, but not every specific solution. In your case, you want entries in the "users" to match the NAS Client-IP-Address, and to set the Pool-Name attribute. The sample configuration in radiusd.conf works, except it's keyed off of Unix group, and not Clinet-IP-Address. Alan DeKok.
Johansson, Daniel wrote:
Hi Freeradius users.
I have compiled and installed the 1.1.0 version of Freeradius and made the basic configurations and everything works fine.
Now I have 5 NAS boxes that is accessing the radius server the problem is that I want each NAS to use a set if ipadresses.
So for NAS(1) the radius should return ippool(1) and so on.
In the users file: DEFAULT NAS-IP-Address == 10.1.2.3, Pool-Name := "pool1" Or possibly if you have more stuff in the users file: DEFAULT NAS-IP-Address == 10.1.2.3, Pool-Name := "pool1" Fall-Through = yes ...the in radiusd.conf: modules { ippool pool1 { # config here } ippool pool2 { # config here } } authorize { # blah } authenticate { # blah } post-auth { pool1 pool2 } accounting { # blah, then pool1 pool2 } HTH
participants (3)
-
Alan DeKok -
Johansson, Daniel -
Phil Mayers