Bulk and Active leasequeries
Hello, This is my first letter to this mailing list and I apologize in advance for possible errors in the format or content of the letter. Brief introduction, our subscribers (GPON, aDSL) receive IP addresses from DHCP server (FreeRADIUS 3.0.14 + MySQL 5.7) in accordance with opt82. In the case of aDSL, there is also a RADIUS server (same FreeRADIUS 3.0.14 + MySQL 5.7), which sends to cisco ISG policie for customer according to ip address. Everything worked just fine until arrival of BNG from Juniper. This device requires Bulk and Active leasequeries. After several days of searching in google, I got the impression that this is not supported in version 3.0.x? Or am I doing something wrong? What about 4.0.0? Best regards, Ivane Porchkhidze This message (including any attachments) is confidential and may be privileged. If you have received it by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change. Silknet shall not be responsible nor liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt or damage to your system. Silknet does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference
On May 28, 2020, at 8:45 AM, Ivane Porchkhidze <ivporchkhidze@silknet.com> wrote:
Hello, This is my first letter to this mailing list and I apologize in advance for possible errors in the format or content of the letter. Brief introduction, our subscribers (GPON, aDSL) receive IP addresses from DHCP server (FreeRADIUS 3.0.14 + MySQL 5.7) in accordance with opt82. In the case of aDSL, there is also a RADIUS server (same FreeRADIUS 3.0.14 + MySQL 5.7), which sends to cisco ISG policie for customer according to ip address. Everything worked just fine until arrival of BNG from Juniper. This device requires Bulk and Active leasequeries. After several days of searching in google, I got the impression that this is not supported in version 3.0.x? Or am I doing something wrong? What about 4.0.0?
The default config in v3 has examples of DHCP lease query. See sites-available/dhcp: dhcp DHCP-Lease-Query { # The thing being queried for is implicit # in the packets. # has MAC, asking for IP, etc. if (&DHCP-Client-Hardware-Address) { # look up MAC in database } This might not be in 3.0.14. But you can always download the latest packages from http://packages.networkradius.com v3 definitely doesn't support bulk lease queries over TCP. v4 doesn't either, but it's relatively trivial to add TCP transport for DHCPv4. Adding support for bulk lease queries is a little more work, but not impossible. Alan DeKok.
Thanks for the quick response.
On May 28, 2020, at 8:45 AM, Ivane Porchkhidze <ivporchkhidze@silknet.com> wrote:
Hello, This is my first letter to this mailing list and I apologize in advance for possible errors in the format or content of the letter. Brief introduction, our subscribers (GPON, aDSL) receive IP addresses from DHCP server (FreeRADIUS 3.0.14 + MySQL 5.7) in accordance with opt82. In the case of aDSL, there is also a RADIUS server (same FreeRADIUS 3.0.14 + MySQL 5.7), which sends to cisco ISG policie for customer according to ip address. Everything worked just fine until arrival of BNG from Juniper. This device requires Bulk and Active leasequeries. After several days of searching in google, I got the impression that this is not supported in version 3.0.x? Or am I doing something wrong? What about 4.0.0?
The default config in v3 has examples of DHCP lease query. See sites-available/dhcp:
dhcp DHCP-Lease-Query { # The thing being queried for is implicit # in the packets.
# has MAC, asking for IP, etc. if (&DHCP-Client-Hardware-Address) { # look up MAC in database }
Yes, of course, there is such an example. I saw your previous comments on this topic, there is even a suggestion to use the cache module: dhcp DHCP-Lease-Query { # look in the cache to see if there is an active lease update control { &Cache-Status-Only := yes } Cache if (notfound) { ... } elsif (ok) { ... } But as I understand it, this applies to DHCP-Lease-Query (rfc4388), but I meant Active DHCPv4 Lease Query (rfc7724)
This might not be in 3.0.14. But you can always download the latest packages from http://packages.networkradius.com
v3 definitely doesn't support bulk lease queries over TCP. v4 doesn't either, but it's relatively trivial to add TCP transport for DHCPv4. Adding support for bulk lease queries is a little more work, but not impossible.
You mean in v4?
Alan DeKok.
This message (including any attachments) is confidential and may be privileged. If you have received it by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change. Silknet shall not be responsible nor liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt or damage to your system. Silknet does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference
On May 29, 2020, at 3:39 AM, Ivane Porchkhidze <ivporchkhidze@silknet.com> wrote:
But as I understand it, this applies to DHCP-Lease-Query (rfc4388), but I meant Active DHCPv4 Lease Query (rfc7724)
Ah, not. Streaming DHCPv4 leases over a TCP socket isn't supported in v3. It might difficult to do in v4, too. The server is very much designed around a request / response architecture. I really wish that the DHCP people would stop inventing database replication. They tried it with the ISC lease replication protocol years ago, and got it horribly wrong. With about 10minutes work, I could get ISC into a state where it was broken, and *never* recovered. These active / bulk lease queries are better. But they're still difficult to implement in FreeRADIUS. The simplest approach may be to just have a special-purpose handler for them. Alan DeKok.
On May 29, 2020, at 3:39 AM, Ivane Porchkhidze <ivporchkhidze@silknet.com> wrote:
But as I understand it, this applies to DHCP-Lease-Query (rfc4388), but I meant Active DHCPv4 Lease Query (rfc7724)
Ah, not. Streaming DHCPv4 leases over a TCP socket isn't supported in v3.
It might difficult to do in v4, too. The server is very much designed around a request / response architecture.
I really wish that the DHCP people would stop inventing database replication. They tried it with the ISC lease replication protocol years ago, and got it horribly wrong. With about 10minutes work, I could get ISC into a state where it was broken, and *never* recovered.
Yes, it's sad.
These active / bulk lease queries are better. But they're still difficult to implement in FreeRADIUS. The simplest approach may be to just have a special-purpose handler for them.
This message (including any attachments) is confidential and may be privileged. If you have received it by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change. Silknet shall not be responsible nor liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt or damage to your system. Silknet does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference
participants (2)
-
Alan DeKok -
Ivane Porchkhidze