Re: Framed-IP-Address to Proxy acct
Hi Alan, First of all thanks for your help, the pre-proxy statement must go in the site-enabled/default right? or it goes in proxy.conf? Should this work instead? update request { Framed-IP-Address := "%{Framed-IP-Address}" } Regards, Elton It is not possible to use the Date: Fri, 5 Feb 2016 13:43:47 -0500 From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Framed-IP-Address to Proxy acct Message-ID: <345DD157-E00A-486D-AE46-1DBA3898AEB4@deployingradius.com> Content-Type: text/plain; charset=us-ascii On Feb 4, 2016, at 6:55 PM, Elton Machado <elton.machado@tenforce.com> wrote:
How can I sent the Framed-IP-Address to a acct remote proxy?
Add the attribute to the packet in the pre-proxy section.
My authentication is being done in a Remote Radius, and I need to send back the accounting from Freeradius to another radius accounting server or at least duplicate accounting to there (Sonicwall)
Since my Dell switch are not able to send the attribute 8 but only the mac address.
OK. That's fine.
Freeradius is responsible for the DHCP and I can see the Framed-IP-Address being there and being set to the DHCP Client IP, but on my proxy acct server I don't see on the AVP the attr 8.
The IP address is stored in an SQL database, along with the MAC address of the machine. So... when the server receives an Accounting-Request packet containing a MAC address, look up the MAC in the SQL database to get the IP address. pre-proxy { ... update request { Framed-IP-Address := "%{sql:SELECT ...}" } ... } You'll have to write the SQL select statement. Test it by hand first, and then add it to the server configuration. Alan DeKok.
On Feb 5, 2016, at 5:38 PM, Elton Machado <elton.machado@tenforce.com> wrote:
First of all thanks for your help, the pre-proxy statement must go in the site-enabled/default right? or it goes in proxy.conf?
Is there a pre-proxy section in sites-enabled/default? Is there a pre-proxy section in proxy.conf? Some thinking for yourself would be nice.
Should this work instead?
update request { Framed-IP-Address := "%{Framed-IP-Address}" }
<sigh> I don't understand why people ask questions, and then argue with the answers. If you're the FreeRADIUS expert, go solve the problem yourself. Otherwise, follow instructions. Alan DeKok.
Hey dude, Calm down and hold on your horses, if you can help me nice, otherwise I do what I'm trying to do for more than 4 days due to the fact that documentation is not that great, and incomplete in most of the case, files are keeping change the place or format etc etc. and yes it is free as the name says I'm a newbie but I was looking for some help and maybe help others with my problem as well not arguing anything I was neither expecting someone to respond I just tried. But anyway thanks in advance for the help already done. Once I can have physically the devices again with me I test it never mind. Regards, *_____________________________________* Elton Machado System Administrator phone: +32 (0) 16 36 02 19 mobile: +32 (0) 476 56 08 32 email: elton.machado@tenforce.com Havenkant 38, 3000 Leuven www.tenforce.com *_____________________________________* On Fri, Feb 5, 2016 at 11:53 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Feb 5, 2016, at 5:38 PM, Elton Machado <elton.machado@tenforce.com> wrote:
First of all thanks for your help, the pre-proxy statement must go in
the site-enabled/default right? or it goes in proxy.conf?
Is there a pre-proxy section in sites-enabled/default?
Is there a pre-proxy section in proxy.conf?
Some thinking for yourself would be nice.
Should this work instead?
update request { Framed-IP-Address := "%{Framed-IP-Address}" }
<sigh> I don't understand why people ask questions, and then argue with the answers.
If you're the FreeRADIUS expert, go solve the problem yourself. Otherwise, follow instructions.
Alan DeKok.
On Feb 5, 2016, at 5:58 PM, Elton Machado <elton.machado@tenforce.com> wrote:
Calm down and hold on your horses,
I'm asking you to not be lazy, and do some thinking for yourself. If this offends you, you need to unsubscribe from the list. I've been helping people here for nearly 20 years. I've seen your kind come and go. Your goal *should* be to get things done. Instead, your focus is arguing with the experts, and getting offended when people tell you that you're less than perfect. Stop complaining or you will be unsubscribed and permanently banned. Alan DeKok.
By the way I already tried with this line: update proxy-request { Framed-IP-Address := "%{Framed-IP-Address}:{%DHCP-Client-IP-Address}" } *_____________________________________* Elton Machado System Administrator phone: +32 (0) 16 36 02 19 mobile: +32 (0) 476 56 08 32 email: elton.machado@tenforce.com Havenkant 38, 3000 Leuven www.tenforce.com *_____________________________________* On Fri, Feb 5, 2016 at 11:53 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Feb 5, 2016, at 5:38 PM, Elton Machado <elton.machado@tenforce.com> wrote:
First of all thanks for your help, the pre-proxy statement must go in
the site-enabled/default right? or it goes in proxy.conf?
Is there a pre-proxy section in sites-enabled/default?
Is there a pre-proxy section in proxy.conf?
Some thinking for yourself would be nice.
Should this work instead?
update request { Framed-IP-Address := "%{Framed-IP-Address}" }
<sigh> I don't understand why people ask questions, and then argue with the answers.
If you're the FreeRADIUS expert, go solve the problem yourself. Otherwise, follow instructions.
Alan DeKok.
On Feb 5, 2016, at 6:00 PM, Elton Machado <elton.machado@tenforce.com> wrote:
By the way I already tried with this line:
update proxy-request { Framed-IP-Address := "%{Framed-IP-Address}:{%DHCP-Client-IP-Address}" }
Which is NOT what I said to do. 5 minutes of thinking about it, and reading "man unlang" would show you that this configuration is wrong. Your problem is not the documentation. It's you. Alan DeKok.
participants (2)
-
Alan DeKok -
Elton Machado