AW: ippool excluded IP addresses

[artur at jaroschek.net]

> Hi Artur,
>
>> Betreff: ippool excluded IP addresses
>>
>> We are using freeradius version (debian) 2.1.12+dfsg-1.2 (we will
>> consider to
>> upgrade to min. 2.2.10 soon)
>>
>> We want to manage the IP pool for our ipsec client on radius side. For
>> this I
>> have set
>>
>> start-ip: 10.150.0.0
>> end-ip: 10.150.255.255
>> netmask: 255.255.255.0
>
> start and end-ip dont match your netmask, for a ipv4 class B net  it needs
> to be set to 255.255.0.0 (/16)

Yes I know - this was totaly intended, see below...

>
>>
>> Will this automatically exclude all IPs ending with .0 and .255???
>> e.g.:
>>
>> 10.150.0.0
>> 10.150.0.255
>> 10.150.1.0
>> 10.150.1.255
>> .
>> .
>> .
>> 10.150.255.0
>> 10.150.255.255
>
> Excluding .0 and .255 is not necessary as they are valid and usable
> ip-addresses within that range.
>
> What are you trying to achieve by exluding them?

We want to exclude all IPs ending with ".255" as out VPN client does not
like them, even though we set Netmask to be /32 or /16.

>
> Chris
>
>>
>> Thank you.
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html