DHCP relaying

2013-09-19 Thread Nikolaos Milas
Hi, I would like to ask how we can direct FR dhcp server (using an ldap backend) to relay to another dhcp server. The idea is that we have a db of known MAC addresses which have an associated VLAN (assigned during MAC Auth) and a static IP address (assigned through FR dhcp server). If a MAC

Re: DHCP relaying

2013-09-19 Thread Alan DeKok
Nikolaos Milas wrote: I would like to ask how we can direct FR dhcp server (using an ldap backend) to relay to another dhcp server. ... update control { DHCP-Relay-To-IP-Address := 192.2.3.4 } ... The idea is that we have a db of known MAC

Re: DHCP relaying

2013-09-19 Thread Nikolaos Milas
On 19/9/2013 3:40 μμ, Alan DeKok wrote: In 2.2.1, it can handle dynamic IP allocation. See raddb/sites-available/dhcp. Look for pool. Thanks. I guess it is supported in 3.0.0 as well ? Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: DHCP relaying

2013-09-19 Thread Alan DeKok
Nikolaos Milas wrote: Thanks. I guess it is supported in 3.0.0 as well ? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: freeradius and dhcp relaying

2011-01-14 Thread Seppo Sandberg
Start off without it. If it works... it's good enough. When I require any further pieces of information on this matter what would be the preferred way of communication, e.g. should I keep using this thread or open a new one on developer list? Best regards, Seppo

Re: freeradius and dhcp relaying

2011-01-14 Thread Alan DeKok
Seppo Sandberg wrote: Start off without it. If it works... it's good enough. When I require any further pieces of information on this matter what would be the preferred way of communication, e.g. should I keep using this thread or open a new one on developer list? The devel list is

RE: freeradius and dhcp relaying

2011-01-13 Thread Seppo Sandberg
Hello, maybe I'll try and rephrase my question. Which attribute should I modify with update reply, e.g. in dhcp DHCP-Discover section of the sites-available/dhcp file, if I wanted to redirect the message to another DHCP server? Best regards, Seppo -

Re: freeradius and dhcp relaying

2011-01-13 Thread Alan DeKok
Seppo Sandberg wrote: Hello, maybe I'll try and rephrase my question. Which attribute should I modify with update reply, e.g. in dhcp DHCP-Discover section of the sites-available/dhcp file, if I wanted to redirect the message to another DHCP server? You can't. DHCP relaying

RE: freeradius and dhcp relaying

2011-01-13 Thread Seppo Sandberg
Thank you for your swift reply. You can't. DHCP relaying is not supported. It shouldn't be hard to add, though. Patches are welcome. If I was inclined to create such a patch how would we begin to tackle the issue? I guess you would tell me how you would like to have it implemented? Best

Re: freeradius and dhcp relaying

2011-01-13 Thread Alan DeKok
Seppo Sandberg wrote: If I was inclined to create such a patch how would we begin to tackle the issue? I guess you would tell me how you would like to have it implemented? See src/main/dhcpd.c Look for relay. Add a cache (hash table or rbtree) for XID, and maybe (XID,MAC). Add entries

Re: freeradius and dhcp relaying

2011-01-13 Thread Phil Mayers
On 13/01/11 11:03, Alan DeKok wrote: Seppo Sandberg wrote: If I was inclined to create such a patch how would we begin to tackle the issue? I guess you would tell me how you would like to have it implemented? See src/main/dhcpd.c Look for relay. Add a cache (hash table or rbtree) for

Re: freeradius and dhcp relaying

2011-01-13 Thread Alan DeKok
Phil Mayers wrote: What's the rationale for keeping state? Some security, IIRC. I was under the impression that DHCP relays could be stateless. Since you can chain relays, but replies go straight back to the first one (via the giaddr field) Yes. The ISC DHCP relay code doesn't store

RE: freeradius and dhcp relaying

2011-01-13 Thread Seppo Sandberg
For our purposes, storing state would allow us to know where to send the reply. The ISC server walks through it's list of interfaces for every reply. This is simple, but it would be safer to maintain state. Is the bottom line that when implementing the dhcp relay there should be caching

Re: freeradius and dhcp relaying

2011-01-13 Thread Alan DeKok
Seppo Sandberg wrote: Is the bottom line that when implementing the dhcp relay there should be caching included? Start off without it. If it works... it's good enough. What data exactly should be stored in the cache? I'll have to think about that. Alan DeKok. - List

freeradius and dhcp relaying

2011-01-12 Thread Seppo Sandberg
Hello, in Freeradius 2.1.10 is it possible to set up the dhcp server to serve as a dhcp relay? Best regards, Seppo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html