Framed-IP-Address Question
Hello everyone, I've got a (maybe stupid) question concerning the Framed-IP-Address which is shown when using "radwho". I'm using freeradius in our club to authenticate several Notebooks using EAP-TLS certificates. The IP-addresses are given from a local dhcp-server. I'm further using access-points from Netgear (WG102) as they provide Accounting informations when using with freeradius. With the tool radwho which is provided from freeradius a can easily see which clients are connected to the different access-points. Now I recognized that for some clients also the local IP-address, which was given to the clients from the local dhcp-server, is shown as "Framed-IP-Address" when running "radwho -R" but only for SOME clients not for ALL. I would like to write a small script using radwho in order to log the ip-adress for each client on login/logout. Sure I could get the ip-address from logfile of the dhcp-server, but I would like to do it as easy as possible. Can anyone tell me why the "Framed-IP-Address" is only shown for some clients and what I would have to do that it is show for all clients which are connected to local network? Best regards and thanks in advance Stefan Puch
I'm using freeradius in our club to authenticate several Notebooks using EAP-TLS certificates. The IP-addresses are given from a local dhcp-server. I'm further using access-points from Netgear (WG102) as they provide Accounting informations when using with freeradius.
With the tool radwho which is provided from freeradius a can easily see which clients are connected to the different access-points. Now I recognized that for some clients also the local IP-address, which was given to the clients from the local dhcp-server, is shown as "Framed-IP-Address" when running "radwho -R" but only for SOME clients not for ALL.
I would like to write a small script using radwho in order to log the ip-adress for each client on login/logout.
Look up detail module in freeradius. It logs the whole Accounting-Request to a text file, but you can filter out what you don't want. Or sql module to log into the database. Again, queries are configurable - log only what you want.
Can anyone tell me why the "Framed-IP-Address" is only shown for some clients and what I would have to do that it is show for all clients which are connected to local network?
It works as reliably as your network. If some requests don't make it to the radius server - no records are created. Ivan Kalik Kalik Informatika ISP
Ivan Kalik wrote:
I would like to write a small script using radwho in order to log the ip-adress for each client on login/logout.
Look up detail module in freeradius. It logs the whole Accounting-Request to a text file, but you can filter out what you don't want. Or sql module to log into the database. Again, queries are configurable - log only what you want.
Thanks for pointing that out, I will give that detail module a try.
Can anyone tell me why the "Framed-IP-Address" is only shown for some clients and what I would have to do that it is show for all clients which are connected to local network?
It works as reliably as your network. If some requests don't make it to the radius server - no records are created. OK, than it could either be a problem of the access-point which doesn't forward the ip-address to the radius server or the client itself which doesn't send it.
Kind regards Stefan Puch
OK, than it could either be a problem of the access-point which doesn't forward the ip-address to the radius server or the client itself which doesn't send it.
In huge majority of cases firewall is resposible for dropped packets. Rarely it is the equipment. Ivan Kalik Kalik Informatika ISP
Stefan Puch wrote:
I've got a (maybe stupid) question concerning the Framed-IP-Address which is shown when using "radwho".
It comes from accounting packets. The content of accounting packets is whatever the NAS sends.
With the tool radwho which is provided from freeradius a can easily see which clients are connected to the different access-points. Now I recognized that for some clients also the local IP-address, which was given to the clients from the local dhcp-server, is shown as "Framed-IP-Address" when running "radwho -R" but only for SOME clients not for ALL.
Blame the NAS.
I would like to write a small script using radwho in order to log the ip-adress for each client on login/logout. Sure I could get the ip-address from logfile of the dhcp-server, but I would like to do it as easy as possible.
If the NAS doesn't send this data, you will have to find some other way to get it for yourself.
Can anyone tell me why the "Framed-IP-Address" is only shown for some clients and what I would have to do that it is show for all clients which are connected to local network?
Different NASes send different data. The same NAS can send different data in different circumstances. Alan DeKok.
participants (3)
-
Alan DeKok -
Stefan Puch -
tnt＠kalik.net