sqlippool and exhausted pool

Alberio Mirko mirko.alberio at telemar.it
Mon Jul 19 14:55:10 CEST 2021


Hi Alan, thanks for the answer, I have some doubts:

   The module returns FAIL if it can't assign an IP address.

   What happens after that depends on your local configuration

What do you mean with "depends on your local configuration"?

   Which comes from where?

That is the point: the customer takes an IP from the pool without 
allocating the pool. Maybe is something related to the above question? 
Meaning is there something I miss to "block" a user on sqlippool module 
FAIL?

And another thing I noticed:

we have some expiry_time way back in the past, but the ip is correctly 
assigned in NAS:

What could it be?


thanks!


Mirko Alberio
Amministratore di Sistemi


Via Enrico Fermi, 235 - 36100 Vicenza - Italia
Tel 0444 291302 - Fax 0444 566310 - www.telemar.it <http://www.telemar.it>
Reg. Imp. Di Vicenza /C.F./P.I. 02508710247
Cap. Soc. € 120.000,00 I.V.
R.E.A. VI-236292

<https://it-it.facebook.com/TelemarIt/> 
<https://www.instagram.com/telemar_it/> 
<https://it.linkedin.com/company/telemar-s-p-a->

Il presente messaggio non costituisce offerta e/o accettazione 
contrattuale.

Ai sensi del Regolamento europeo per la protezione dei dati personali n. 
679/2016 (GDPR) si precisa che le informazioni contenute in questo 
messaggio e/o nel/i file/s allegato/i sono riservate ed a uso esclusivo 
del destinatario. Qualora il messaggio in parola Le fosse pervenuto per 
errore, La invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a 
terzi, dandocene gentilmente comunicazione. Grazie.
Pursuant to General Data Protection Regulation (GDPR), you are hereby 
informed that this message contains confidential information intended 
only for the use of the addressee. If you are not the addressee, and 
have received this message by mistake, please delete it and immediately 
notify us. You may not copy or disseminate this message to anyone. Thank 
you.


Il 19/07/2021 14:08, Alan DeKok ha scritto:
> On Jul 19, 2021, at 3:19 AM, Alberio Mirko via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
>> because of the IPv4 shortage we exhausted our PPPOE assignment public IP address pool,
>>
>> I could not find documentation on this: what happens if pool is full and an AAA request arrives to the radius?
>    The module returns FAIL if it can't assign an IP address.
>
>    What happens after that depends on your local configuration
>
>> At the moment it seems we have cases of users having a public IP address
>    Which comes from where?
>
>> and actually accessing internet with that BUT in the pool table it is not correcty taken, so this generate cases where 2 different users have the same IP address, only one working.
>    The server doesn't randomly assign IP addresses.  It only assigns IP addresses when you tell it to assign IP addresses.
>
>    The IP pool module doesn't assign the same IP to two different users.  It relies on the database to track usage.
>
>    Now, if the NAS lies to FreeRADIUS about who is online, then anything can happen.  But you can't blame FreeRADIUS for that.
>
>    Alan DeKok.
>


More information about the Freeradius-Users mailing list