DHCP configuration using freeradius
Hi, Recently, I started using freeradius for my home WiFi and i wanted to configuration freeradius to provide DHCP service. Can any one help me on this. kabin
On 10/03/2020, kabin mool <kabin_mool@hotmail.com> wrote:
Recently, I started using freeradius for my home WiFi and i wanted to configuration freeradius to provide DHCP service.
Can any one help me on this.
I might be able to help you but I would first need to know a bit more about how you want it to work. DHCP servers generally either give out addresses dynamically or statically (e.g based on a MAC address or Option 82 value) and sometimes a mixture of both. If you want to do dynamic addressing then you need to think about where you will strore the leases. Probably you would strore them in a database of some sort but the thing is that FreeRADIUS supports so many that you need to first decide which one you will use. So I would say that the first thing to do is decide on your strategy for issuing addresses and then decide where you want to keep the leases and/or static mac/ip mappings so support your chosen sheme. Once you have that I (or others) can help you with the details. -- Ben Thompson
Thanks Ben. Let's start with the simple DHCP with statically assignment. Can you share me some details on this? kabin ________________________________ From: Freeradius-Users <freeradius-users-bounces+kabin_mool=hotmail.com@lists.freeradius.org> on behalf of Benjamin Thompson <b.thompson@latera.ru> Sent: Tuesday, March 10, 2020, 1:26 PM To: FreeRadius users mailing list Subject: Re: DHCP configuration using freeradius On 10/03/2020, kabin mool <kabin_mool@hotmail.com> wrote:
Recently, I started using freeradius for my home WiFi and i wanted to configuration freeradius to provide DHCP service.
Can any one help me on this.
I might be able to help you but I would first need to know a bit more about how you want it to work. DHCP servers generally either give out addresses dynamically or statically (e.g based on a MAC address or Option 82 value) and sometimes a mixture of both. If you want to do dynamic addressing then you need to think about where you will strore the leases. Probably you would strore them in a database of some sort but the thing is that FreeRADIUS supports so many that you need to first decide which one you will use. So I would say that the first thing to do is decide on your strategy for issuing addresses and then decide where you want to keep the leases and/or static mac/ip mappings so support your chosen sheme. Once you have that I (or others) can help you with the details. -- Ben Thompson - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Is it possible to share me configuration steps and details. I am bit lost with this document. kabin ________________________________ From: Freeradius-Users <freeradius-users-bounces+kabin_mool=hotmail.com@lists.freeradius.org> on behalf of Alan DeKok <aland@deployingradius.com> Sent: Tuesday, March 10, 2020, 5:09 PM To: FreeRadius users mailing list Subject: Re: DHCP configuration using freeradius On Mar 10, 2020, at 5:37 AM, kabin mool <kabin_mool@hotmail.com> wrote:
Let's start with the simple DHCP with statically assignment. Can you share me some details on this?
raddb/sites-available/dhcp The server comes with extensive documentation, and examples. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mar 10, 2020, at 8:43 AM, kabin mool <kabin_mool@hotmail.com> wrote:
Is it possible to share me configuration steps and details. I am bit lost with this document.
If you read it and follow the instructions, you should have a basic DHCP server up in about five minutes. It won't do anything complex, but it *will* answer DHCP queries. Do you have *specific* questions about the document? Or is it just "I have no idea what any of it means". The larger question is what to do you want to *do*? "DHCP" isn't an answer. DHCP is a protocol. Do you want dynamic IPs from a pool? If so, which database do you want? Or do you want static IPs? Your question is so open-ended as to be meaningless. You might as well say "I want a car. Which one should I buy?" The answer is "well, that depends..." If you ask good questions, you get good answers. If you ask vague and meaningless questions, you can only get vague answers. Alan DeKok.
Hi Alan, I read the document but I am not getting the concept. I want to provide static IP using DHCP of free radius. Authorization part is working now need the step to provide static IP using DHCP as well. Can you provide me the steps for this? kabin ________________________________ From: Freeradius-Users <freeradius-users-bounces+kabin_mool=hotmail.com@lists.freeradius.org> on behalf of Alan DeKok <aland@deployingradius.com> Sent: Tuesday, March 10, 2020, 6:41 PM To: FreeRadius users mailing list Subject: Re: DHCP configuration using freeradius
On Mar 10, 2020, at 8:43 AM, kabin mool <kabin_mool@hotmail.com> wrote:
Is it possible to share me configuration steps and details. I am bit lost with this document.
If you read it and follow the instructions, you should have a basic DHCP server up in about five minutes. It won't do anything complex, but it *will* answer DHCP queries. Do you have *specific* questions about the document? Or is it just "I have no idea what any of it means". The larger question is what to do you want to *do*? "DHCP" isn't an answer. DHCP is a protocol. Do you want dynamic IPs from a pool? If so, which database do you want? Or do you want static IPs? Your question is so open-ended as to be meaningless. You might as well say "I want a car. Which one should I buy?" The answer is "well, that depends..." If you ask good questions, you get good answers. If you ask vague and meaningless questions, you can only get vague answers. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mar 10, 2020, at 9:33 AM, kabin mool <kabin_mool@hotmail.com> wrote:
I read the document but I am not getting the concept.
Of... what?
I want to provide static IP using DHCP of free radius. Authorization part is working now need the step to provide static IP using DHCP as well.
The document shows an example of assigning a static IP. What part of that is unclear?
Can you provide me the steps for this?
Apparently not. The documentation should be clear. In order to understand the document, you need to know how DHCP works. FreeRADIUS isn't a "point and click GUI" that does everything for you. You have to understand the technical details of the protocol. This includes what packets arrive when and where. This includes what's in the packets. If you can't understand the text I already wrote in that document, I'm not sure what else I can write that will help. I suggest reading up on how DHCP works. Alan DeKok.
hi Alan, Let me explain for the beginning Initially I started with the small configuration using client.conf and user.conf and my authorization is working then I integrate with mysql database and it is working as well now . Sent Access-Request Id 193 from 0.0.0.0:45678 to 192.168.100.73:1812 length 75 User-Name = "kabin" User-Password = "kabin" NAS-IP-Address = 127.0.0.1 NAS-Port = 1001 Message-Authenticator = 0x00 Cleartext-Password = "kabin" Received Access-Accept Id 193 from 192.168.100.73:1812 to 0.0.0.0:0 length 20 Now, i want to try dhcp static IP assignment whenever this user is used. I am using this document : https://wiki.freeradius.org/guide/dhcp-for-static-ip-allocation#let-s-start_... guide/dhcp for static ip allocation - FreeRADIUS<https://wiki.freeradius.org/guide/dhcp-for-static-ip-allocation#let-s-start_prepare-mysql-database> Why using Freeradius as a DHCP instead of the traditional ISC DHCP server?-Because it has the possibility to manage IP's configuration of each host directly from a DB, while ISC only accepts text archives. wiki.freeradius.org I using centos and this document is for ubuntu and got confused on [cid:5eb5fc0f-68ce-4b1a-9b96-ec1a1afbdb20] Can you help me on this ? Kabin ________________________________ From: Freeradius-Users <freeradius-users-bounces+kabin_mool=hotmail.com@lists.freeradius.org> on behalf of Alan DeKok <aland@deployingradius.com> Sent: Tuesday, March 10, 2020 7:26 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: DHCP configuration using freeradius On Mar 10, 2020, at 9:33 AM, kabin mool <kabin_mool@hotmail.com> wrote:
I read the document but I am not getting the concept.
Of... what?
I want to provide static IP using DHCP of free radius. Authorization part is working now need the step to provide static IP using DHCP as well.
The document shows an example of assigning a static IP. What part of that is unclear?
Can you provide me the steps for this?
Apparently not. The documentation should be clear. In order to understand the document, you need to know how DHCP works. FreeRADIUS isn't a "point and click GUI" that does everything for you. You have to understand the technical details of the protocol. This includes what packets arrive when and where. This includes what's in the packets. If you can't understand the text I already wrote in that document, I'm not sure what else I can write that will help. I suggest reading up on how DHCP works. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mar 10, 2020, at 11:18 AM, kabin mool <kabin_mool@hotmail.com> wrote:
Initially I started with the small configuration using client.conf and user.conf and my authorization is working then I integrate with mysql database and it is working as well now .
That's good.
Sent Access-Request Id 193 from 0.0.0.0:45678 to 192.168.100.73:1812 length 75 User-Name = "kabin" User-Password = "kabin" NAS-IP-Address = 127.0.0.1 NAS-Port = 1001 Message-Authenticator = 0x00 Cleartext-Password = "kabin" Received Access-Accept Id 193 from 192.168.100.73:1812 to 0.0.0.0:0 length 20
OK, but that's not DHCP.
Now, i want to try dhcp static IP assignment whenever this user is used.
I think you're confused here. FreeRADIUS can do IP assignment. It can do this in RADIUS. It doesn't need DHCP. It can just return Framed-IP-Address in a RADIUS packet. As a *completely seperate* step to RADIUS authentication, FreeRADIUS can also receive DHCP packets. Is this what you want? Because you've spent a lot of time *not* explaining what you want. *Not* explaining what you did. Which is frustrating, and wastes everyones time.
I am using this document : https://wiki.freeradius.org/guide/dhcp-for-static-ip-allocation#let-s-start_...
guide/dhcp for static ip allocation - FreeRADIUS<https://wiki.freeradius.org/guide/dhcp-for-static-ip-allocation#let-s-start_prepare-mysql-database> Why using Freeradius as a DHCP instead of the traditional ISC DHCP server?-Because it has the possibility to manage IP's configuration of each host directly from a DB, while ISC only accepts text archives. wiki.freeradius.org
Why copy the Wiki text to the mailing list? We've seen that. It doesn't help.
I using centos and this document is for ubuntu and got confused on
[cid:5eb5fc0f-68ce-4b1a-9b96-ec1a1afbdb20]
That looks like some local link. Don't post images to the mailing list. It's a waste of time. If you have questions about a document, post TEXT.
Can you help me on this ?
I'm trying, but you're not making it easy. Describe what you want to do. So far all I know is that you're confused about just about everything. Alan DeKok.
Thanks alan and very sorry to o confused you and wasting your time. My problem is whenever any user use kabin in any device , he must be provided static IP. Can it be done with DHCP or frame ip only? Kabin ________________________________ From: Freeradius-Users <freeradius-users-bounces+kabin_mool=hotmail.com@lists.freeradius.org> on behalf of Alan DeKok <aland@deployingradius.com> Sent: Tuesday, March 10, 2020 9:52 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: DHCP configuration using freeradius On Mar 10, 2020, at 11:18 AM, kabin mool <kabin_mool@hotmail.com> wrote:
Initially I started with the small configuration using client.conf and user.conf and my authorization is working then I integrate with mysql database and it is working as well now .
That's good.
Sent Access-Request Id 193 from 0.0.0.0:45678 to 192.168.100.73:1812 length 75 User-Name = "kabin" User-Password = "kabin" NAS-IP-Address = 127.0.0.1 NAS-Port = 1001 Message-Authenticator = 0x00 Cleartext-Password = "kabin" Received Access-Accept Id 193 from 192.168.100.73:1812 to 0.0.0.0:0 length 20
OK, but that's not DHCP.
Now, i want to try dhcp static IP assignment whenever this user is used.
I think you're confused here. FreeRADIUS can do IP assignment. It can do this in RADIUS. It doesn't need DHCP. It can just return Framed-IP-Address in a RADIUS packet. As a *completely seperate* step to RADIUS authentication, FreeRADIUS can also receive DHCP packets. Is this what you want? Because you've spent a lot of time *not* explaining what you want. *Not* explaining what you did. Which is frustrating, and wastes everyones time.
I am using this document : https://wiki.freeradius.org/guide/dhcp-for-static-ip-allocation#let-s-start_...
guide/dhcp for static ip allocation - FreeRADIUS<https://wiki.freeradius.org/guide/dhcp-for-static-ip-allocation#let-s-start_prepare-mysql-database> Why using Freeradius as a DHCP instead of the traditional ISC DHCP server?-Because it has the possibility to manage IP's configuration of each host directly from a DB, while ISC only accepts text archives. wiki.freeradius.org
Why copy the Wiki text to the mailing list? We've seen that. It doesn't help.
I using centos and this document is for ubuntu and got confused on
[cid:5eb5fc0f-68ce-4b1a-9b96-ec1a1afbdb20]
That looks like some local link. Don't post images to the mailing list. It's a waste of time. If you have questions about a document, post TEXT.
Can you help me on this ?
I'm trying, but you're not making it easy. Describe what you want to do. So far all I know is that you're confused about just about everything. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html kabin
On Mar 10, 2020, at 12:22 PM, kabin mool <kabin_mool@hotmail.com> wrote:
My problem is whenever any user use kabin in any device , he must be provided static IP. Can it be done with DHCP or frame ip only?
It depends on how you have configured your network. Generally... DHCP. And DHCP does IP allocation based on MAC addresses (generally). It doesn't do IP allocation based on user names. So... there's a LOT more you need to do in order to configure this. It won't work at *all* until you have a clear understanding of networking fundamentals. Alan DeKok.
participants (3)
-
Alan DeKok -
Benjamin Thompson -
kabin mool