Not trivial configuration of Freeradius as DHCP server
Arran Cudbard-Bell
a.cudbardb at freeradius.org
Mon Mar 10 21:01:48 CET 2014
On 10 Mar 2014, at 19:38, Alan DeKok <aland at deployingradius.com> wrote:
> Vyacheslav Maliev wrote:
>> Hello! I`ve tried to configure my freeradius installation like described
>> here http://wiki.freeradius.org/guide/dhcp-for-static-ip-allocation
>> but it`s very simple case for only one subnet. Now we have two networks
>> which needs to get IP by DHCP server. So is there any possibility to
>> configure DHCP scopes for different networks? Thanks!
>
> Yes. It's not as easy as with a dedicated DHCP server. You'll need
> to split the packets, so that some use subnet A, and some use subnet B.
> Look at the packets (radiusd -X) to see how they're different. Usually
> there will be a gateway IP address different, or perhaps something else.
>
> It's probably best to use groups to assign the network parameters.
> e.g. use the radgroupcheck and radgroupreply tables. For users in group
> A, assign them options for network A, and users in group B should be
> assigned options in network B.
>
> i.e. separate the *common* configuration into group parameters. Thenm
> each user should have only user-specific parameters. e.g. an IP
> address, and a group membership.
>
> For v3.1, we're looking at maybe coming up with DHCP-specific queries
> for SQL. But getting help from other people would be useful, too.
Just to clarify, is the difficulty on separating policy for different
networks, or identifying the network from which the DHCP packet originated?
Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140310/dacf1734/attachment.pgp>
More information about the Freeradius-Users
mailing list