Freeradius Proxy - Framed IP Address Accounting attribute

[Alan DeKok]

On Aug 1, 2017, at 8:21 AM, Byron Jeffery <byronjeffery at cem.org.au> wrote:
> 
> I currently have a test FreeRadius server setup for authentication (local
> user file)  and DHCP which is working as intended, however, I am trying to
> implement a solution whereby the Framed IP Address attribute and username
> is sent to an accounting server at some point during or after the
> authentication process.

  The NAS is responsible for sending accounting packets.  If you want something in the accounting packets, see the NAS documentation.

> My understanding is that after the user successfully authenticates, the
> client device then proceeds to obtain an IP address from the DHCP,

  Yes.  And the DHCP address assignment has pretty much nothing to do with RADIUS.

> however,
> am I correct in saying that if I wish to obtain the Framed IP Address, I
> will not be able to obtain this after the authentication (ie: post-auth).

  post-auth runs before the Access-Accept is sent back.

  If the IP is assigned via DHCP, it won't be available in post-auth.

> If so, am I able to make a call to the dhcp_sqlippool to get an IP during
> the post-auth process or is there a better alternative method to do this?

  You can call dhcp_sqlippool, but it won't do what you want.

  I think you're missing parts of the puzzle.  For one, you're not explaining everything that's going on in your system.  Is DHCP being assigned via RADIUS?

  What you *can* do is assign Framed-IP-Address in post-auth.  Then, if you're using FreeRADIUS for DHCP, you can have it query the IP pool based on MAC to find the same IP.

  But that requires understanding how the pieces work together.  There is no default configuration which just works here.

  Alan DeKok.