-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm having some trouble with ippool. I have some ip pools who need to be distributed for my clients. There is a example, my radiusd.conf: ... ippool p0 { range-start = xx.xx.xx.1 range-stop = xx.xx.xx.20 netmask = 255.255.255.0 cache-size = 32 session-db = ${raddbdir}/ippool/db.ippool.p0 ip-index = ${raddbdir}/ippool/db.ipindex.p0 override = yes maximum-timeout = 0 } ippool p1 { range-start = xx.xx.xx.21 range-stop = xx.xx.xx.40 netmask = 255.255.255.0 cache-size = 32 session-db = ${raddbdir}/ippool/db.ippool.p1 ip-index = ${raddbdir}/ippool/db.ipindex.p1 override = yes maximum-timeout = 0 } ... In accounting: accounting { ... group mypools { p0 p1 } ... } In post-auth: post-auth { ... group mypools { p0 p1 } ... } In (mysql) radgroupcheck : +-----+-------------------+------------------+----+-------------+------+ | id | GroupName | Attribute | op | Value | prio | +-----+-------------------+------------------+----+-------------+------+ | 30 | mygroup | Pool-Name | := | p0 | 1 | | 31 | mygroup | Pool-Name | := | p1 | 1 | ... It's working, but my clients only catch IP from the first pool (p0). They never catch from others pools (p1, p2 ...). Somebody already had a problem like this? Thanks !!! - -- - ---------------------------- Roberto Gonzalez Azevedo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFFJmaWF+EMwkXLsEwRAt+jAJ45YW7n1JkYxje54bNCtsRs5rmwXgCfUnf/ NFDvR7t4usmdljxm/xB26XQ= =xMzx -----END PGP SIGNATURE-----
You're using the wrong syntax for including the pools in each section. Here's an example from my own config... modules { ippool 512k_high { # range-start,range-stop: The start and end ip # addresses for the ip pool range-start =x.x.x.6 range-stop =x.x.x.66 # netmask: The network mask used for the ip's netmask = 255.255.255.0 # cache-size: The gdbm cache size for the db # files. Should be equal to the number of ip's # available in the ip pool cache-size = 60 # session-db: The main db file used to allocate ip's to clients session-db = ${raddbdir}/ippool.512k_high # ip-index: Helper db index file used in multilink ip-index = ${raddbdir}/ipindex.512k_high # override: Will this ippool override a Framed-IP-Address already set override = no # maximum-timeout: If not zero specifies the maximum time in seconds an # entry may be active. Default: 0 maximum-timeout = 0 } ippool 512k_low { ................... instantiate { } authorize { preprocess sql } authenticate { pap } preacct { preprocess } accounting {l radutmp 512k_high 512k_low 10m_high 10m_low sql } session { radutmp sql } post-auth { sql 512k_high 512k_low 10m_high 10m_low } Also, I notice that 'mygroup' has IP assignments from 2 pools. This can't work, because RADIUS will just select the first one it gets from MySQL. May I suggest either subdividing your users into two groups, or merging the two groups? Hope this helps, Jan On 06/10/06, Roberto Gonzalez Azevedo <rgonzalez@censanet.com.br> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
I'm having some trouble with ippool. I have some ip pools who need to be distributed for my clients.
There is a example, my radiusd.conf: ... ippool p0 { range-start = xx.xx.xx.1 range-stop = xx.xx.xx.20 netmask = 255.255.255.0
cache-size = 32 session-db = ${raddbdir}/ippool/db.ippool.p0 ip-index = ${raddbdir}/ippool/db.ipindex.p0
override = yes maximum-timeout = 0 }
ippool p1 { range-start = xx.xx.xx.21 range-stop = xx.xx.xx.40 netmask = 255.255.255.0
cache-size = 32 session-db = ${raddbdir}/ippool/db.ippool.p1 ip-index = ${raddbdir}/ippool/db.ipindex.p1
override = yes maximum-timeout = 0 } ...
In accounting: accounting { ... group mypools { p0 p1 } ... }
In post-auth: post-auth { ... group mypools { p0 p1 } ... }
In (mysql) radgroupcheck :
+-----+-------------------+------------------+----+-------------+------+ | id | GroupName | Attribute | op | Value | prio | +-----+-------------------+------------------+----+-------------+------+ | 30 | mygroup | Pool-Name | := | p0 | 1 |
| 31 | mygroup | Pool-Name | := | p1 | 1 |
...
It's working, but my clients only catch IP from the first pool (p0). They never catch from others pools (p1, p2 ...).
Somebody already had a problem like this?
Thanks !!! - -- - ---------------------------- Roberto Gonzalez Azevedo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux)
iD8DBQFFJmaWF+EMwkXLsEwRAt+jAJ45YW7n1JkYxje54bNCtsRs5rmwXgCfUnf/ NFDvR7t4usmdljxm/xB26XQ= =xMzx -----END PGP SIGNATURE----- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Thanks for reply. I can't subdivide in two groups ... I need 1 group, with several pools ... Thanks - ---------------------------- Roberto Gonzalez Azevedo Jan Mulders wrote:
You're using the wrong syntax for including the pools in each section.
Here's an example from my own config...
modules { ippool 512k_high {
# range-start,range-stop: The start and end ip # addresses for the ip pool range-start =x.x.x.6 range-stop =x.x.x.66
# netmask: The network mask used for the ip's netmask = 255.255.255.0
# cache-size: The gdbm cache size for the db # files. Should be equal to the number of ip's # available in the ip pool cache-size = 60
# session-db: The main db file used to allocate ip's to clients session-db = ${raddbdir}/ippool.512k_high
# ip-index: Helper db index file used in multilink ip-index = ${raddbdir}/ipindex.512k_high
# override: Will this ippool override a Framed-IP-Address already set override = no
# maximum-timeout: If not zero specifies the maximum time in seconds an # entry may be active. Default: 0 maximum-timeout = 0 } ippool 512k_low { ...................
instantiate { }
authorize { preprocess sql }
authenticate { pap }
preacct { preprocess }
accounting {l radutmp 512k_high 512k_low 10m_high 10m_low sql }
session { radutmp sql
} post-auth { sql 512k_high 512k_low 10m_high 10m_low }
Also, I notice that 'mygroup' has IP assignments from 2 pools. This can't work, because RADIUS will just select the first one it gets from MySQL. May I suggest either subdividing your users into two groups, or merging the two groups?
Hope this helps,
Jan
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFFJsW3F+EMwkXLsEwRAvBWAJ9gCqSst7b9rwLCHhb3f/PO91jFSgCfcKRv V5wK1k3//j5PcVBqOte5FAc= =xw2T -----END PGP SIGNATURE-----
On Sat 07 Oct 2006 14:17, Phil Mayers wrote:
Roberto Gonzalez Azevedo wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Thanks for reply.
I can't subdivide in two groups ... I need 1 group, with several pools ...
Can't be done. Sorry
As explained to Roberto on IRC this IS possible with sqlippool but not with ippool. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
On Sat 07 Oct 2006 19:13, Peter Nixon wrote:
On Sat 07 Oct 2006 14:17, Phil Mayers wrote:
Roberto Gonzalez Azevedo wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Thanks for reply.
I can't subdivide in two groups ... I need 1 group, with several pools ...
Can't be done. Sorry
As explained to Roberto on IRC this IS possible with sqlippool but not with ippool. I have documented this config at:
http://wiki.freeradius.org/Rlm_sqlippool#Non_Contiguous_Pool Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
participants (4)
-
Jan Mulders -
Peter Nixon -
Phil Mayers -
Roberto Gonzalez Azevedo