Binding FreeRadius to the DHCP Server

Elie Hani ehani at wise.net.lb
Wed Jul 26 09:10:38 CEST 2006


Thanks Michal,I will try this one, but still one more thing. To for the
Freeradius to talk to the DHCP, there's a place where I should configure the
DHCP's address. Where should I configure the DHCP address  on the radius so
the last one will use the DHCP's Ips.

Thanks
Elie 

-----Original Message-----
From: freeradius-users-bounces+ehani=wise.net.lb at lists.freeradius.org
[mailto:freeradius-users-bounces+ehani=wise.net.lb at lists.freeradius.org] On
Behalf Of Michael J. Hartwick
Sent: Tuesday, July 25, 2006 5:22 PM
To: FreeRadius users mailing list
Subject: RE: Binding FreeRadius to the DHCP Server 

On Tue, 25 Jul 2006 at 13:46 (+0200), Elie Hani wrote:

EH> As a matter of fact, for the first login, the users will have an IP 
EH> from a certain pool X, once the informations are entered, and after 
EH> redialing, the users will get the new IP from the second pool Y.
EH> 
EH> All I want to know is if it's possible to bind the radius to a DHCP 
EH> server, if yes how it can be done? Otherwise, is there any other 
EH> pssible method to configure 2 pools of Ips X and Y and relay it to the
DHCP?

I think you could do this without involving a DHCP server (can a PPP
connection even use DHCP??). Their is a module rlm_ippool which looks like
it would do what you want. I haven't used this since I haven't needed
multiple pools, but it looks like it would work.

In radiusd.conf something like:

ippool fake {
	range-start = 192.168.1.1	# I assume you are meaning
	range-stop = 192.168.1.254	# RFC1918 space when you
	netmask = 255.255.255.0		# say faked.
	cache-size = 254
	session-db = ${raddbdir}/db.ippool-fake
	ip-index = ${raddbdir}/db.ipindex-fake
	override = yes
	maximum-timeout = 0
}

ippool real {
	range-start = 10.10.10.1
	range-stop = 10.10.10.254
	netmask = 255.255.255.0
	cache-size = 254
	session-db = ${raddbdir}/db.ippool-real
	ip-index = ${raddbdir}/db.ipindex-real
	override = no
	maximum-timeout = 0
}	

And in users something like:

guest	User-Password := "guest", Pool-Name := "fake"
	Service-Type = Framed-User,
	Framed-Protocol = PPP

DEFAULT	Auth-Type := System, Pool-Name := "real"
	Service-Type = Framed-User,
	Framed-Protocol = PPP

I have not tested any of this, it may cause Bad Things(tm) to happen, adjust
accordingly to use the correct IP ranges, etc.

#include <standard-disclaimer.h>

Michael

----------------------------------------------------------------------
Michael J. Hartwick, VE3SLQ                      hartwick at hartwick.com
Hartwick Communications Consulting                      (519) 396-7719
Kincardine, ON, CA                             http://www.hartwick.com
----------------------------------------------------------------------
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list