Not trivial configuration of Freeradius as DHCP server

Alan DeKok aland at
Mon Mar 10 20:38:49 CET 2014

Vyacheslav Maliev wrote:
> Hello! I`ve tried to configure my freeradius installation like described
> here
> but it`s very simple case for only one subnet. Now we have two networks
> which needs to get IP by DHCP server. So is there any possibility to
> configure DHCP scopes for different networks? Thanks!

  Yes.  It's not as easy as with a dedicated DHCP server.  You'll need
to split the packets, so that some use subnet A, and some use subnet B.
 Look at the packets (radiusd -X) to see how they're different.  Usually
there will be a gateway IP address different, or perhaps something else.

  It's probably best to use groups to assign the network parameters.
e.g. use the radgroupcheck and radgroupreply tables.  For users in group
A, assign them options for network A, and users in group B should be
assigned options in network B.

  i.e. separate the *common* configuration into group parameters.  Thenm
each user should have only user-specific parameters.  e.g. an IP
address, and a group membership.

  For v3.1, we're looking at maybe coming up with DHCP-specific queries
for SQL.  But getting help from other people would be useful, too.

  Alan DeKok.

More information about the Freeradius-Users mailing list