HOWTO add Framed-Ip-Address AVP to Access-Request while proxying

Nitin Bhardwaj nbhardwaj at merunetworks.com
Tue May 24 18:45:02 CEST 2011


Hi,

I am using FreeRADIUS to proxy EAP-PEAP authentication as MSCHAPv2 to a 
third-party RADIUS Server. (Terminating the outer tunnel at FreeRADIUS).
However, I need to send an AVP of "Framed-Ip-Address" to the third party 
RADIUS server ( its a legacy server), for which I tried adding a realm 
entry into attrs.pre-proxy:

-----------------------------------------------< SNIP 
 >-------------------------------------------------------------
#brokenas
#       NAS-Port-Type == Ethernet
#       Fall-Through = Yes

# The rest of this file contains the DEFAULT entry.
# DEFAULT matches with all realm names.

MyRealm.com
         Framed-IP-Address := 192.168.50.12
         Fall-Through = Yes

DEFAULT
         User-Name =* ANY,
         User-Password =* ANY,
         CHAP-Password =* ANY,
         CHAP-Challenge =* ANY,
         MS-CHAP-Challenge =* ANY,
         MS-CHAP-Response =* ANY,
         EAP-Message =* ANY,
         Message-Authenticator =* ANY,
         State =* ANY,
         NAS-IP-Address =* ANY,
         NAS-Identifier =* ANY,
         Proxy-State =* ANY
-----------------------------------------------< END 
 >-------------------------------------------------------------
But FreeRADIUS is not generating the "Framed-Ip-Address" in the outgoing 
Access-Request (MSCHAPv2).
How can I make FR generate the AVP ?/

/Nitin



More information about the Freeradius-Users mailing list