Mikrotik ignores Framed-IP-Address

Marinko Tarlac mangia81 at gmail.com
Mon Nov 12 10:11:23 CET 2007


Hello

I have freeradius and Mikrotik combination and here is the problem.
Freeradius is configured to use mysql database. When I add
Framed-IP-Address for certain user (in radreply table) For example

32  	user  	Framed-IP-Address  	10.51.8.152  	:=

It works but only if I don't have IP pool created on Mikrotik. If I
create IP pool than Framed-IP-Address is ignored. Framed-Pool is
specified for every group and attributes for every group is added in
radgroupreply table.

Log without IP pool

rad_recv: Access-Request packet from host 192.168.1.7:1026, id=229, length=149
        Service-Type = Framed-User
        Framed-Protocol = PPP
        NAS-Port = 870
        NAS-Port-Type = Ethernet
        User-Name = "admin-test"
        Calling-Station-Id = "00:C0:CA:18:75:B3"
        Called-Station-Id = "radius"
        NAS-Port-Id = "ether1"
        CHAP-Challenge = 0x89a28dc77659b6311a88c16eb7500767
        CHAP-Password = 0x01d385ce5c814c1d1db9cafadb4736c351
        NAS-Identifier = "1.7 - h-0"
        NAS-IP-Address = 192.168.1.7
  rlm_chap: Setting 'Auth-Type := CHAP'
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql (sql): Released sql socket id: 4
  rlm_chap: login attempt by "admin-test" with CHAP password
  rlm_chap: Using clear text password "perica" for user admin-test
authentication.
  rlm_chap: chap user admin-test authenticated succesfully
Sending Access-Accept of id 229 to 192.168.1.7 port 1026
        Framed-IP-Address := 192.168.8.152
        Framed-MTU = 576
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Framed-Compression = Van-Jacobson-TCP-IP
        Ascend-Data-Rate := 0
        Ascend-Xmit-Rate := 0
        Framed-Pool := "radius"

Log with created IP pool called "radius"

rad_recv: Access-Request packet from host 192.168.1.7:1027, id=240, length=149
        Service-Type = Framed-User
        Framed-Protocol = PPP
        NAS-Port = 872
        NAS-Port-Type = Ethernet
        User-Name = "admin-test"
        Calling-Station-Id = "00:C0:CA:18:75:B3"
        Called-Station-Id = "radius"
        NAS-Port-Id = "ether1"
        CHAP-Challenge = 0x5293ac8321ad51693a5e3109f8887511
        CHAP-Password = 0x01b0a9f7bca1f632878bee51c13d667f5c
        NAS-Identifier = "1.7 - h-0"
        NAS-IP-Address = 192.168.1.7
  rlm_chap: Setting 'Auth-Type := CHAP'
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql (sql): Released sql socket id: 4
  rlm_chap: login attempt by "admin-test" with CHAP password
  rlm_chap: Using clear text password "perica" for user admin-test
authentication.
  rlm_chap: chap user admin-test authenticated succesfully
Sending Access-Accept of id 240 to 192.168.1.7 port 1027
        Framed-IP-Address := 192.168.8.152
        Framed-MTU = 576
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Framed-Compression = Van-Jacobson-TCP-IP
        Ascend-Data-Rate := 0
        Ascend-Xmit-Rate := 0
        Framed-Pool := "radius"
rad_recv: Accounting-Request packet from host 192.168.1.7:1027,
id=241, length=146
        Service-Type = Framed-User
        Framed-Protocol = PPP
        NAS-Port = 872
        NAS-Port-Type = Ethernet
        User-Name = "admin-test"
        Calling-Station-Id = "00:C0:CA:18:75:B3"
        Called-Station-Id = "radius"
        NAS-Port-Id = "ether1"
        Acct-Session-Id = "81d00316"
        Framed-IP-Address = 192.168.8.159
        Acct-Authentic = RADIUS
        Acct-Status-Type = Start
        NAS-Identifier = "1.7 - h-0"
        NAS-IP-Address = 192.168.1.7
        Acct-Delay-Time = 0
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql (sql): Released sql socket id: 3
Sending Accounting-Response of id 241 to 192.168.1.7 port 1027

Any ideas?



More information about the Freeradius-Users mailing list