HOWTO add Framed-Ip-Address AVP to Access-Request while proxying
Hi, I am using FreeRADIUS to proxy EAP-PEAP authentication as MSCHAPv2 to a third-party RADIUS Server. (Terminating the outer tunnel at FreeRADIUS). However, I need to send an AVP of "Framed-Ip-Address" to the third party RADIUS server ( its a legacy server), for which I tried adding a realm entry into attrs.pre-proxy: -----------------------------------------------< SNIP
------------------------------------------------------------- #brokenas # NAS-Port-Type == Ethernet # Fall-Through = Yes
# The rest of this file contains the DEFAULT entry. # DEFAULT matches with all realm names. MyRealm.com Framed-IP-Address := 192.168.50.12 Fall-Through = Yes DEFAULT User-Name =* ANY, User-Password =* ANY, CHAP-Password =* ANY, CHAP-Challenge =* ANY, MS-CHAP-Challenge =* ANY, MS-CHAP-Response =* ANY, EAP-Message =* ANY, Message-Authenticator =* ANY, State =* ANY, NAS-IP-Address =* ANY, NAS-Identifier =* ANY, Proxy-State =* ANY -----------------------------------------------< END
------------------------------------------------------------- But FreeRADIUS is not generating the "Framed-Ip-Address" in the outgoing Access-Request (MSCHAPv2). How can I make FR generate the AVP ?/
/Nitin
Hi,
I am using FreeRADIUS to proxy EAP-PEAP authentication as MSCHAPv2 to a third-party RADIUS Server. (Terminating the outer tunnel at FreeRADIUS). However, I need to send an AVP of "Framed-Ip-Address" to the third party RADIUS server ( its a legacy server), for which I tried adding a realm entry into attrs.pre-proxy:
debug output is always very handy. the file you are looking at is mainly (if only?) used for FILTERING. you should look at preproxy_users file instead DEFAULT Realm == "MyRealm.com" Framed-IP-Address = "192.168.50.12" and then ensure this file is called in your config (ensure that 'files' is enabled in pre-proxy section of your virtual server) files? yes, files - if you check the modules/files directory you will see it calls the following preproxy_usersfile = ${confdir}/preproxy_users alan
participants (2)
-
Alan Buxey -
Nitin Bhardwaj