Elegant solution to per MAC Framed-IP-Address?
I'm setting up my network to have a DHCP server with host reservations. I'm using EAP-Auth with PEAP-mschapv2 on each user's device, so they log in with a username and password and CA. I'm using mysql to back Freeradius and in the radreply table when I started configuring I had a username and Framed-IP-Address for my single test device. However, each user may connect with one of several devices, each with a different reserved IP. So I'd prefer to lookup the Framed-IP-Address with a MAC address instead despite using the regular username for authentication. Rather than reinvent the wheel myself, has anyone done this in a nice clean way and is willing to share their custom queries/config? Or can I just ignore the radreply table altogether and delete the Framed-IP-Address? Thanks, Toby
Thanks Alan! On Fri, 11 Nov 2016 at 22:28 Alan DeKok <aland@deployingradius.com> wrote:
On Nov 11, 2016, at 9:16 AM, Toby Walsh <walshtj@gmail.com> wrote:
Or can I just ignore the radreply table altogether and delete the Framed-IP-Address?
EAP ignores the Framed-IP-Address in the Access-Accept. So just delete that from the radreply table.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Toby Walsh