Freeradius DHCP

Nathan Ward lists+freeradius at
Mon Aug 12 14:34:27 CEST 2019

> On 12/08/2019, at 11:47 PM, Alan DeKok <aland at> wrote:
> On Aug 11, 2019, at 9:24 PM, Maile Halatuituia <maile.halatuituia at> wrote:
>> Actually I was referring to the PPPoE like Authentication and you have confirmed DHCP does not do the same.
>> Any idea how I would achieve at least similar to PPPoE. I mean is it possible to authenticate DHCP clients before assigning the Address. I mean similar to what PPP does with Freeradius on PPPoE.
>  On Cisco devices, this is "mac auth".  You need to configure the Cisco NAS to do Mac auth.  There's also a guide in the FreeRADIUS Wiki for configuring Mac Auth on the server.

Hi Alan,

I think what he’s wanting to do, based on other ML threads, is more “ISG” on a BNG. This takes DHCP DISCOVER messages, and talks to RADIUS to authenticate them based on whatever - usually option 82 information - and passes back confusing Cisco AVPs with terrible confusing names to tweak what the BNG does. <>

There are links to the relevant Cisco documents etc. there.

Maile - email me off list if you like and I can give you a steer on some of this stuff.

Nathan Ward

More information about the Freeradius-Users mailing list