Freeradius DHCP

[Nathan Ward]

> On 12/08/2019, at 11:47 PM, Alan DeKok <aland at deployingradius.com> wrote:
> 
> On Aug 11, 2019, at 9:24 PM, Maile Halatuituia <maile.halatuituia at tcc.to> wrote:
>> Actually I was referring to the PPPoE like Authentication and you have confirmed DHCP does not do the same.
>> 
>> Any idea how I would achieve at least similar to PPPoE. I mean is it possible to authenticate DHCP clients before assigning the Address. I mean similar to what PPP does with Freeradius on PPPoE.
> 
>  On Cisco devices, this is "mac auth".  You need to configure the Cisco NAS to do Mac auth.  There's also a guide in the FreeRADIUS Wiki for configuring Mac Auth on the server.


Hi Alan,

I think what he’s wanting to do, based on other ML threads, is more “ISG” on a BNG. This takes DHCP DISCOVER messages, and talks to RADIUS to authenticate them based on whatever - usually option 82 information - and passes back confusing Cisco AVPs with terrible confusing names to tweak what the BNG does.

https://lists.gt.net/cisco/nsp/201724 <https://lists.gt.net/cisco/nsp/201724>
etc.

There are links to the relevant Cisco documents etc. there.

Maile - email me off list if you like and I can give you a steer on some of this stuff.

--
Nathan Ward