make use of external DHCP server or ip address provisioning

Rene Stoutjesdijk r.stoutjesdijk at
Sun Jun 5 11:23:23 CEST 2016

i do have a question (my first on this list) or described situation below
is possible, and if yes can somebody provide me tips how to do the
freeradius part.

I do have a freeradius daemon up and running with only authentication and
I would like to change the setup that also ip address are provided (via the
AVP Framed-IP-Address) towards the client.
This seems to be possible, but i would like to get the ip address from an
external DHCP server. So basically what i would like to achieve is:
if authentication request comes in:
- let the radius daemon do a request for an ip address from an external
dhcp server with the following characteristics
    - the client mac address should contain the IMSI/MSISDN from the
subscriber (request is coming from a GGSN (mobile network)) so doesn't
contain a valid client mac address
    - the username AVP should be used as (i think option 61) within DHCP so
it can also be used with the DHCP/DNS integration for name resolving (DDNS)
    - if the ip address is provided towards the free radius daemon, take
this ip address and provide it back within the framed-ip-addres AVP towards
the radius client (GGSN)

I do have maybe an alternative and that's provide the ip address from the
free radius daemon and execute a nsupdate update script to update the DNS,
but i think the above described situation is better.

thx in advance for your response.

More information about the Freeradius-Users mailing list