lists+freeradius at daork.net
Mon Aug 12 14:34:27 CEST 2019
> On 12/08/2019, at 11:47 PM, Alan DeKok <aland at deployingradius.com> wrote:
> On Aug 11, 2019, at 9:24 PM, Maile Halatuituia <maile.halatuituia at tcc.to> wrote:
>> Actually I was referring to the PPPoE like Authentication and you have confirmed DHCP does not do the same.
>> Any idea how I would achieve at least similar to PPPoE. I mean is it possible to authenticate DHCP clients before assigning the Address. I mean similar to what PPP does with Freeradius on PPPoE.
> On Cisco devices, this is "mac auth". You need to configure the Cisco NAS to do Mac auth. There's also a guide in the FreeRADIUS Wiki for configuring Mac Auth on the server.
I think what he’s wanting to do, based on other ML threads, is more “ISG” on a BNG. This takes DHCP DISCOVER messages, and talks to RADIUS to authenticate them based on whatever - usually option 82 information - and passes back confusing Cisco AVPs with terrible confusing names to tweak what the BNG does.
There are links to the relevant Cisco documents etc. there.
Maile - email me off list if you like and I can give you a steer on some of this stuff.
More information about the Freeradius-Users