Framed-Route ignored
Arthur Sigel
arthur at mir5.homeip.net
Tue Dec 13 19:05:35 CET 2005
I have been trying to get this to work for a few days now with no success.
I have set up poptop (PPTP) and it uses the /etc/ppp/options.pptp file which
has a plugin for radius. plugin radius.so
Radius will authenticate with my users fine, but I can't seem to get the
Framed-Route option to do anything.
I am trying to set a route for a mask and not just the single IP to device
ppp connection.
Does ppp just ignore the route and this option just doesn't work with ppp or
pptp? Is there a workaround?
Thank you,
Arthur
I am also using a SQL connection so the information will be left in that
format.
radius=# select * from radgroupcheck;
id | groupname | attribute | op | value
----+-----------+-----------+----+---------
1 | static | Auth-Type | := | MS-CHAP
radius=# select * from radgroupreply;
id | groupname | attribute | op | value
----+-----------+--------------------+----+---------------------
1 | static | Framed-Protocol | := | PPP
2 | static | Service-Type | := | Framed-user
3 | static | Framed-Compression | := | Van-Jacobsen-TCP-IP
id | username | attribute | op | value
----+----------+-------------------+----+-----------------------
1 | arthur | Framed-IP-Address | := | 10.0.0.4
3 | arthur | Framed-Routing | := | None
2 | arthur | Framed-IP-Netmask | := | 255.255.255.0
4 | arthur | Framed-Route | := | 10.0.0.0/24 0.0.0.0 1
The options file contains:
plugin radius.so
lock
mtu 1490
mru 1490
multilink
#proxyarp
auth
ipcp-accept-remote
lcp-echo-failure 30
lcp-echo-interval 5
deflate 0
+mschap-v2
mppe required
nopcomp
noaccomp
pptpd.conf
localip 191.168.4.1
-----------------------------
VERSIONS OF THINGS
pptpd-1.2.3
pppd version 2.4.3
FreeRadius 1.05
RADIUS output snippet
Framed-IP-Address := 10.0.0.4
Framed-IP-Netmask := 255.255.255.0
Framed-Routing := None
Framed-Route := "10.0.0.0/24 0.0.0.0 1"
Framed-Protocol := PPP
Service-Type := Framed-User
Framed-Compression := Van-Jacobson-TCP-IP
MS-CHAP2-Success = *****
MS-MPPE-Recv-Key = *****
MS-MPPE-Send-Key = *****
MS-MPPE-Encryption-Policy = 0x00000002
MS-MPPE-Encryption-Types = 0x00000004
rad_recv: Accounting-Request packet from host 127.0.0.1:32798, id=114,
length=112
Acct-Session-Id = "439E72E33A2C00"
User-Name = "arthur"
Acct-Status-Type = Start
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "**.**.**.**"
Acct-Authentic = RADIUS
NAS-Port-Type = Async
Framed-IP-Address = 10.0.0.4
NAS-IP-Address = 127.0.0.1
NAS-Port = 0
Acct-Delay-Time = 0
Routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
10.0.0.4 * 255.255.255.255 UH 0 0
0 ppp0
192.168.3.0 * 255.255.255.0 U 0 0
0 eth2
192.168.2.0 * 255.255.255.0 U 0 0
0 eth0
192.168.1.0 * 255.255.255.0 U 0 0
0 eth1
loopback * 255.0.0.0 U 0 0
0 lo
default 192.168.2.1 0.0.0.0 UG 0 0
0 eth0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20051213/253678eb/attachment.html>
More information about the Freeradius-Users
mailing list