Hi Ivan, Thanks for your reply. But how do DHCP know NOT to give the IP to the client When the authentication fail on RADIUS? Kevin SZ -----Original Message----- From: freeradius-users-bounces+kzhang=danger.com@lists.freeradius.org [mailto:freeradius-users-bounces+kzhang=danger.com@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Tuesday, March 25, 2008 4:51 PM To: FreeRadius users mailing list Subject: Re: dhcp+radius There is nothing to configure. It works that way. Ivan Kalik Kalik Informatika ISP Dana 25/3/2008, "Kevin Zhang" <kzhang@danger.com> piše:

Hi,

How do I configure Radius server to work with DHCP server, so the client will authenticate with Radius first

before DHCP will assign it an IP?

Kevin SZ

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hi Ivan, Thanks again for the reply. Actually my scenario is like this: I have a box needs to be installed via PXE. The box will send out its mac address to get the ip of tftp server and the location of pxelinux.0. Without Radius, the box will talk to DHCP server directly for all The information it needs. If I want to implement the authentication Using RADIUS so net boot will continue only after the authentication succeed. I just want to know where RADIUS fit into this model step by step. Kevin SZ -----Original Message----- From: freeradius-users-bounces+kzhang=danger.com@lists.freeradius.org [mailto:freeradius-users-bounces+kzhang=danger.com@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Tuesday, March 25, 2008 5:03 PM To: FreeRadius users mailing list Subject: RE: dhcp+radius Because it will never be asked for one. PPP negotaiation will not reach that stage. Ivan Kalik Kalik Informatika ISP Dana 25/3/2008, "Kevin Zhang" <kzhang@danger.com> piše:

Hi Ivan,

Thanks for your reply. But how do DHCP know NOT to give the IP to the client When the authentication fail on RADIUS?

Kevin SZ

-----Original Message----- From: freeradius-users-bounces+kzhang=danger.com@lists.freeradius.org [mailto:freeradius-users-bounces+kzhang=danger.com@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Tuesday, March 25, 2008 4:51 PM To: FreeRadius users mailing list Subject: Re: dhcp+radius

There is nothing to configure. It works that way.

Ivan Kalik Kalik Informatika ISP

Dana 25/3/2008, "Kevin Zhang" <kzhang@danger.com> piše:

...

Hi,

How do I configure Radius server to work with DHCP server, so the client will authenticate with Radius first

before DHCP will assign it an IP?

Kevin SZ

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Kevin Zhang wrote:

Hi Ivan,

Thanks for your reply. But how do DHCP know NOT to give the IP to the client When the authentication fail on RADIUS?

When you configure your switch, you can tell him what to do when auth fails. You can shutdown the port or put him into another vlan - without dhcp for example. HTH, Sven -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFH6ZUZQoCguWUBzBwRAvIRAKCt8fL1/Z9V89UwnbD864cCO3/8dwCfUaCe xDu+BoIAxx7nqKdHqQQ2/JM= =8B6r -----END PGP SIGNATURE-----