ISC DHCP -> FreeRADIUS turnkey solutions
Hi all, My google-fu is failing me today; are there any examples/case studies/etc of one moving from ISC’s DHCP server to FreeRADIUS? Most of the use case here is for a management network and (with a couple exceptions) are mostly a small number of static allocations served via DHCP. The only potentially cute bit I may have do deal with are sending the vendor-specific “cookie” (for lack of a better term) for APC UPSes and PDUs. Thanks, -Coy — Coy Hile coy.hile@coyhile.com <mailto:coy.hile@coyhile.com>
On Jul 2, 2018, at 4:31 PM, Coy Hile <coy.hile@coyhile.com> wrote:
My google-fu is failing me today; are there any examples/case studies/etc of one moving from ISC’s DHCP server to FreeRADIUS? Most of the use case here is for a management network and (with a couple exceptions) are mostly a small number of static allocations served via DHCP. The only potentially cute bit I may have do deal with are sending the vendor-specific “cookie” (for lack of a better term) for APC UPSes and PDUs.
That's one bit which needs more work, unfortunately. There's a simple import tool in scripts/dhcp/isc2pool.pl But the Wiki could definitely use some more documentation. I've seen v3 working with 100K+ leases in an SQL database. It works fine. The question is what are you doing? What kind of configuration do you have in ISC? Alan DeKok.
On Jul 2, 2018, at 7:05 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 2, 2018, at 4:31 PM, Coy Hile <coy.hile@coyhile.com> wrote:
My google-fu is failing me today; are there any examples/case studies/etc of one moving from ISC’s DHCP server to FreeRADIUS? Most of the use case here is for a management network and (with a couple exceptions) are mostly a small number of static allocations served via DHCP. The only potentially cute bit I may have do deal with are sending the vendor-specific “cookie” (for lack of a better term) for APC UPSes and PDUs.
That's one bit which needs more work, unfortunately. There's a simple import tool in scripts/dhcp/isc2pool.pl
But the Wiki could definitely use some more documentation.
I've seen v3 working with 100K+ leases in an SQL database. It works fine.
The question is what are you doing? What kind of configuration do you have in ISC?
It’s honestly utterly trivial; this is my home lab. A few static endpoints for infrastructure to get to machines’ management ports: https://us-east.manta.joyent.com/cah220/public/dhcpd.conf.txt -- Coy Hile coy.hile@coyhile.com
On Jul 2, 2018, at 7:42 PM, Coy Hile <coy.hile@coyhile.com> wrote:
It’s honestly utterly trivial; this is my home lab. A few static endpoints for infrastructure to get to machines’ management ports:
https://us-east.manta.joyent.com/cah220/public/dhcpd.conf.txt
So there's nothing really pre-set which will convert that to the FreeRADIUS format. TBH, it's likely not hard, it's just that no one has done it. You'll have to do the conversion by hand, unfortunately. It's tedious, but possible. It's likely not much work to write an "rlm_isc_dhcp" module that reads this configuration format, and just "does the right thing" with FreeRADIUS. That's probably the simplest way to get this done. But yes, it's not trivial. The FreeRADIUS DHCP server is more easily configured to putting 10K+ leases into SQL. Something which (until recently) was impossible with ISC. Alan DeKok.
participants (2)
-
Alan DeKok -
Coy Hile