DHCP NAT (and Relay) and Static Addressing based on Option82/Circuit ID
Alan DeKok
aland at deployingradius.com
Wed Nov 23 15:49:40 CET 2016
On Nov 22, 2016, at 7:47 PM, Martin Edge <medge at emersion.com> wrote
> -DHCP Relay issue-
> Totally agree against modifying the source! It was a temporary path of desperation to fit inside restrictive timelines :)
>
> The change you have suggested - where in the many configuration files would that go?
In raddb/sites-enabled/dhcp.
Please *read* it. It helps.
> I have attempted to put it in sites-enabled/dhcp and in mods-enabled/preprocess - which parses fine, but essentially seems to do nothing. I've removed the if condition in case something was going weird there.
Don't put run-time statements into module configurations.
You can't just add random things to random files and expect it to work. The configuration is documented. There are hundreds of examples.
> Best case scenario I would probably want to put something specific for this customer versus breaking the rules all the time, for instance
>
> If (&DHCP-Relay-IP-Address && "%{Packet-Src-IP-Address}" == "x.x.x.x") {
> update request {
> DHCP-Relay-IP-Address := "%{Packet-Src-IP-Address}"
> }
> }
Yes, that works.
> -DHCP Settings-
> OK. When you say 'sql' module, can I have you elaborate a little on that? As in modify the SQL module itself or is there something I should be able to do leveraging existing functionality?
>
> Is there some documentation or reference that would be worth me reading to figure this out?
It's not that hard to find the documentation.
> I see the definition of a table 'usergroup_table' for instance, but I'm unable to see how it all stitches together.
http://wiki.freeradius.org
Type "sql" into the search bar. Read the documentation. It is *extensively* documented.
> Also not sure if this suggests I might be taking the wrong path - presently the 'Pool' I'm using is actually not really a pool, it's a 1:1 between Circuit ID (Service) and the IP address.
Then it's static IP assignment, and not pools.
Alan DeKok.
More information about the Freeradius-Users
mailing list