Ok here's where I'm at now:
I added a second IP Pool in my radius.conf. If I create a user account
with a group that only lists that new IP Pool (main_pool2), I get an
address in that pool. The problem is when I have a user in a group that
uses both pools (main_pool and main_pool2), when the first pool runs out
of IP addresses, the second pool does not get used.
Below are all sections of the radius.conf that I've got the pools called
out.
any suggestions are greatly appreciated. Help!
Marco
ippool main_pool {
# range-start,range-stop: The start and end ip
# addresses for the ip pool
range-start = 44.202.227.1
range-stop = 44.202.229.254
# netmask: The network mask used for the ip's
netmask = 255.255.255.0
# cache-size: The gdbm cache size for the db
# files. Should be equal to the number of ip's
# available in the ip pool
cache-size = 762
# session-db: The main db file used to allocate ip's to clients
session-db = ${raddbdir}/db.ippool
# ip-index: Helper db index file used in multilink
ip-index = ${raddbdir}/db.ipindex
# override: Will this ippool override a Framed-IP-Address already set
override = no
# maximum-timeout: If not zero specifies the maximum time in seconds an
# entry may be active. Default: 0
maximum-timeout = 0
}
ippool main_pool2 {
# range-start,range-stop: The start and end ip
# addresses for the ip pool
range-start = 44.202.237.1
range-stop = 44.202.239.254
# netmask: The network mask used for the ip's
netmask = 255.255.255.0
# cache-size: The gdbm cache size for the db
# files. Should be equal to the number of ip's
# available in the ip pool
cache-size = 762
# session-db: The main db file used to allocate ip's to clients
session-db = ${raddbdir}/db.ippool2
# ip-index: Helper db index file used in multilink
ip-index = ${raddbdir}/db.ipindex2
# override: Will this ippool override a Framed-IP-Address already set
override = no
# maximum-timeout: If not zero specifies the maximum time in seconds an
# entry may be active. Default: 0
maximum-timeout = 0
}
accounting {
detail
main_pool
main_pool2
radutmp
sql
}
post-auth {
# Get an address from the IP Pool.
main_pool
main_pool2
sql
}
redundant {
# added by mcc per suggestions 11/9/08
main_pool
main_pool2
#
# reply_log
}
Marco C. Coelho wrote:
I've been trying to get my second set up IP address' working. The
main_pool works correctly. main_pool2 does not appear to ever issue
more than 2 ip addresses.
you had previously mentioned:
Marco C. Coelho wrote:
>> Did you put "main_pool" and "main_pool" into a fail-over section, as
>> documented in "man unlang" ?
>>
>
> No, and I must be blind, because I have read the section and cannot
> find mention of it.
Sorry, the "redundant" section should do what you want.
Alan DeKok.
I cannot find a redundant section in this radiusd.conf
my radiusd.conf contains:
ippool main_pool {
# range-start,range-stop: The start and end ip
# addresses for the ip pool
range-start = 64.202.227.1
range-stop = 64.202.229.254
# netmask: The network mask used for the ip's
netmask = 255.255.255.0
# cache-size: The gdbm cache size for the db
# files. Should be equal to the number of ip's
# available in the ip pool
cache-size = 762
# session-db: The main db file used to allocate ip's to clients
session-db = ${raddbdir}/db.ippool
# ip-index: Helper db index file used in multilink
ip-index = ${raddbdir}/db.ipindex
# override: Will this ippool override a Framed-IP-Address already set
override = no
# maximum-timeout: If not zero specifies the maximum time in
seconds an
# entry may be active. Default: 0
maximum-timeout = 0
}
ippool main_pool2 {
# range-start,range-stop: The start and end ip
# addresses for the ip pool
range-start = 64.202.237.1
range-stop = 64.202.239.254
# netmask: The network mask used for the ip's
netmask = 255.255.255.0
# cache-size: The gdbm cache size for the db
# files. Should be equal to the number of ip's
# available in the ip pool
cache-size = 762
# session-db: The main db file used to allocate ip's to clients
session-db = ${raddbdir}/db.ippool2
# ip-index: Helper db index file used in multilink
ip-index = ${raddbdir}/db.ipindex2
# override: Will this ippool override a Framed-IP-Address already set
override = no
# maximum-timeout: If not zero specifies the maximum time in
seconds an
# entry may be active. Default: 0
maximum-timeout = 0
}
**********************************It also has:
# Accounting. Log the accounting data.
#
accounting {
#
# Create a 'detail'ed log of the packets.
# Note that accounting requests which are proxied
# are also logged in the detail file.
detail
main_pool
main_pool2
**********************************It also has:
# Post-Authentication
# Once we KNOW that the user has been authenticated, there are
# additional steps we can take.
post-auth {
# Get an address from the IP Pool.
main_pool
main_pool2
#
# If you want to have a log of authentication replies,
# un-comment the following line, and the 'detail reply_log'
# section, above.
------------------------------------------------------------------------
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
