Freeradius/MySQL - Dynamic IP address, help pls?
Hi All; I have been for sometime now trying to get Freeradius to assign Dynamic IP Addresses to my users, with no luck! I can authenticate users and give static ip address without a hint of problem. I am using Freeradius Version 2.1.1 with MySQL backend with a Cisco VPN3000; I have read all about: Pool-Name := main_pool, Fall-Through = Yes, the Freeradius WIKI, etc, etc; but can't get anything to work. Could any body help me to add the right entries on the sql tables for user: TEST Group called: DYNAMIC ip pool called: MAIN_POOL IP range of 192.168.2.1 till 192.168.2.10 I am seriously burn-out! Thanks Lucio _________________________________________________________________ Win £1000 John Lewis shopping sprees with BigSnapSearch.com http://clk.atdmt.com/UKM/go/117442309/direct/01/
I have read all about: Pool-Name := main_pool, Fall-Through = Yes, the Freeradius WIKI, etc, etc; but can't get anything to work.
Could any body help me to add the right entries on the sql tables for
user: TEST Group called: DYNAMIC ip pool called: MAIN_POOL IP range of 192.168.2.1 till 192.168.2.10
1. Configure your pool in raddb/modules/ippool. Read (and follow) instructions about Pool-Name and db files. 2. Add user (test) to the group (dynamic) in radusergroup table. 3. Add attribute (Pool-Name), value (main_pool) and operator (:=) to the group (dynamic) checking in radgroupcheck table. Ivan Kalik Kalik Informatika ISP
Hi Ivan; Thank you for the quick response. I though on Freeradius version 2.x i needed to work only on the SQL tables, and that i needed to specify on the file "raddb/sites-enabled/default" as: authorize { sql} authenticate { sql} preacct { acct_unique} accounting { sqlippool} session { sql} post-auth { sqlippool} then populate the table "radippool" with: id;pool_name;FramedIPAddress;NASIPAddress;CalledStationId;CallingStationID;expiry_time;username;pool_key2;main_pool;192.168.6.4;;;;0/0/0000;;3;main_pool;192.168.6.5;;;;0/0/0000;;4;main_pool;192.168.6.6;;;;0/0/0000;;5;main_pool;192.168.6.7;;;;0/0/0000;; Then the table "radgroupcheck" with: GroupName: dynamic Attribute: Pool-Name op: := Value: main_pool Then the table "radusergroup" UserName: macaco GroupName: dynamic priority: 0 Nothing on the table "radgroupreply" or "radreply" Is this right? thanks Lucio
To: freeradius-users@lists.freeradius.org> Subject: Re: Freeradius/MySQL - Dynamic IP address, help pls?> Date: Tue, 11 Nov 2008 19:39:50 +0100> From: tnt@kalik.net> > >I have read all about: Pool-Name := main_pool, Fall-Through = Yes, the Freeradius WIKI, etc, etc; but can't get anything to work.> > > >Could any body help me to add the right entries on the sql tables for> > > >user: TEST> >Group called: DYNAMIC> >ip pool called: MAIN_POOL> >IP range of 192.168.2.1 till 192.168.2.10> > 1. Configure your pool in raddb/modules/ippool. Read (and follow)> instructions about Pool-Name and db files.> > 2. Add user (test) to the group (dynamic) in radusergroup table.> > 3. Add attribute (Pool-Name), value (main_pool) and operator (:=) to the> group (dynamic) checking in radgroupcheck table.> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
See the most popular videos on the web http://clk.atdmt.com/GBL/go/115454061/direct/01/
Thank you for the quick response. I though on Freeradius version 2.x i needed to work only on the SQL tables, and that i needed to specify on the file "raddb/sites-enabled/default" as: authorize { sql} authenticate { sql} preacct { acct_unique} accounting { sqlippool} session { sql} post-auth { sqlippool}
In accountung and post-auth you add pool name (main_pool) not sqlippool. There should be entries for main_pool already there (commented out).
then populate the table "radippool" with:
id;pool_name;FramedIPAddress;NASIPAddress;CalledStationId;CallingStationID;expiry_time;username;pool_key2;main_pool;192.168.6.4;;;;0/0/0000;;3;main_pool;192.168.6.5;;;;0/0/0000;;4;main_pool;192.168.6.6;;;;0/0/0000;;5;main_pool;192.168.6.7;;;;0/0/0000;;
You just need to add the pool name and the IP address.
Then the table "radgroupcheck" with:
GroupName: dynamic Attribute: Pool-Name op: := Value: main_pool
OK.
Then the table "radusergroup"
UserName: macaco GroupName: dynamic priority: 0 Nothing on the table "radgroupreply" or "radreply"
Is this right?
Yes. Ivan Kalik Kalik Informatika ISP
Hi Ivan; Got it sorted! I had two files on the "sites-enabled" directory, one was the default and another one called defaul.bak, which i had created and tested with some configs. By starting the radius server with -X option and piping the output to a file: radiusd -X > file i was able to verify that radiusd was reading both files and giving preference to the .bak file, so i deleted the .bak file and it worked at first time. Thanks a lot for your help. Lucio
To: freeradius-users@lists.freeradius.org> Subject: RE: Freeradius/MySQL - Dynamic IP address, help pls?> Date: Wed, 12 Nov 2008 12:36:59 +0100> From: tnt@kalik.net> > >Thank you for the quick response. I though on Freeradius version 2.x i needed to work only on the SQL tables, and that i needed to specify on the file "raddb/sites-enabled/default" as:> >authorize { sql}> >authenticate { sql}> >preacct { acct_unique}> >accounting { sqlippool}> >session { sql}> >post-auth {> > sqlippool}> >> > In accountung and post-auth you add pool name (main_pool) not sqlippool.> There should be entries for main_pool already there (commented out).> > > > >then populate the table "radippool" with:> > > >id;pool_name;FramedIPAddress;NASIPAddress;CalledStationId;CallingStationID;expiry_time;username;pool_key2;main_pool;192.168.6.4;;;;0/0/0000;;3;main_pool;192.168.6.5;;;;0/0/0000;;4;main_pool;192.168.6.6;;;;0/0/0000;;5;main_pool;192.168.6.7;;;;0/0/0000;;> > You just need to add the pool name and the IP address.> > >Then the table "radgroupcheck" with:> > > >GroupName: dynamic > >Attribute: Pool-Name > >op: :=> >Value: main_pool> > > > OK.> > > > >Then the table "radusergroup"> > > >UserName: macaco> >GroupName: dynamic> >priority: 0> >Nothing on the table "radgroupreply" or "radreply"> > > >Is this right?> >> > Yes.> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
BigSnapSearch.com - 24 prizes a day, every day - Search Now! http://clk.atdmt.com/UKM/go/117442309/direct/01/
participants (2)
-
Lucio Godoy -
tnt@kalik.net