DHCP relay IP and gateway IP, possible bad logic?

Igor Smitran sigor at blic.net
Mon Mar 4 10:42:47 CET 2013


On 03/01/2013 04:12 PM, Alan DeKok wrote:
> Can you supply the debug output?
When set that freeradius sends IP, NETMASK, DNS... *WITHOUT DEFAULT 
GATEWAY*:

*This packet is sent to RELAY_IP*

*$RAD_REPLY{'DHCP-Gateway-IP-Address'} NOT SENT*
---------------------------------------------------------------------------
   TIME: 09:46:24.886544
     OP: 2 (BOOTPREPLY)
  HTYPE: 1 (Ethernet)
   HLEN: 6
   HOPS: 1
   SECS: 0
  FLAGS: 0
CIADDR: 0.0.0.0
YIADDR: CPE_PUBLIC_IP
SIADDR: RADIUS_IP
*GIADDR: PRIVATE_RELAY_IP*
CHADDR: **:**:**:**:**:**:00:00:00:00:00:00:00:00:00:00
  SNAME: .
  FNAME: .
OPTION:  53 (  1) DHCP message type         2 (DHCPOFFER)
OPTION:   1 (  4) Subnet mask               255.255.255.240
OPTION:   2 (  4) Time offset               7200 (2h)
OPTION:   3 (  4) Routers                   RELAY_PRIVATE_IP
OPTION:   6 (  4) DNS server                DNS_IP
OPTION:  12 ( 17) Host name                 HOST_MAC_ADDRESS
OPTION:  15 (  8) Domainname                DOMAIN
OPTION:  51 (  4) IP address leasetime      7200 (2h)
OPTION:  54 (  4) Server identifier         RADIUS_IP
OPTION:  57 (  2) Maximum DHCP message size 1500

####################################################

When set that freeradius sends IP, NETMASK, DNS... *WITH DEFAULT GATEWAY*:

*This packet is sent to GIADDR**, whis is wrong**!!!*

*$RAD_REPLY{'DHCP-Gateway-IP-Address'} SENT*
---------------------------------------------------------------------------
   TIME: 09:46:24.886544
     OP: 2 (BOOTPREPLY)
  HTYPE: 1 (Ethernet)
   HLEN: 6
   HOPS: 1
   SECS: 0
  FLAGS: 0
CIADDR: 0.0.0.0
YIADDR: CPE_PUBLIC_IP
SIADDR: RADIUS_IP
*GIADDR: **$RAD_REPLY{'DHCP-Gateway-IP-Address'}*
CHADDR: **:**:**:**:**:**:00:00:00:00:00:00:00:00:00:00
  SNAME: .
  FNAME: .
OPTION:  53 (  1) DHCP message type         2 (DHCPOFFER)
OPTION:   1 (  4) Subnet mask               255.255.255.240
OPTION:   2 (  4) Time offset               7200 (2h)
OPTION:   3 (  4) Routers                   RELAY_PRIVATE_IP
OPTION:   6 (  4) DNS server                DNS_IP
OPTION:  12 ( 17) Host name                 HOST_MAC_ADDRESS
OPTION:  15 (  8) Domainname                DOMAIN
OPTION:  51 (  4) IP address leasetime      7200 (2h)
OPTION:  54 (  4) Server identifier         RADIUS_IP
OPTION:  57 (  2) Maximum DHCP message size 1500

So, when freeradius sees *DHCP-Gateway-IP-Address *inside reply offer he 
uses it as destination where to send reply which is wrong. He should use 
RELAY IP instead no matter what's inside BOOTREPLY.*



*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130304/15f71e5c/attachment-0001.html>


More information about the Freeradius-Users mailing list