> Hi,
>
> How can I configure FreeRADIUS to assign IP address dinamically with Ip
> Pool when there is a successful authentication from Cisco 7200 access
> server with FreeRADIUS 1.0.0?
>
> Like this it works sending out only 2 ip address...always the same...
Is your Cisco sending a unique nasport/nasip for each client? Ip pool
uses the nasip/nasport to identify the user.
YES
FROM LOGS SHOWED BELOW, IT SENDS OUT THE SAME TWO ADDRESS AND
DOESN'T KEEP ANYONE ENTRY IN YOUR DATABASE .IPPOOL (VIEWED WITH rlm_ippool_tool
-a ...)
run radiusd -X and have several users establish a connection. Post the
output here if you can't decifer it.
rad_recv: Access-Request packet from host 83.216.176.254:21661, id=219,
length=95
Framed-Protocol = PPP
User-Name = "font0001@"
CHAP-Password = 0x01af73ef6670b0a4a65130cb133a902c2f
NAS-Port-Type = Virtual
NAS-Port = 0
Service-Type = Framed-User
NAS-IP-Address = 83.216.176.254
rad_lowerpair: User-Name now 'font0001@'
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 13
modcall[authorize]: module "preprocess" returns ok for request 13
radius_xlat:
'/freerad100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607'
rlm_detail:
/freerad100/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
expands to /freera
d100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607
modcall[authorize]: module "auth_log" returns ok for request 13
rlm_chap: Setting 'Auth-Type := CHAP'
modcall[authorize]: module "chap" returns ok for request 13
modcall[authorize]: module "mschap" returns noop for request 13
rlm_realm: No '/' in User-Name = "font0001@", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "IPASS" returns noop for request 13
rlm_realm: Looking up realm "@" for User-Name = "font0001@"
rlm_realm: No such realm "@"
modcall[authorize]: module "suffix" returns noop for request 13
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module "eap" returns noop for request 13
modcall[authorize]: module "files" returns notfound for request 13
radius_xlat: 'font0001@'
rlm_sql (sql): sql_set_user escaped user --> 'font0001@'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE
Username = '[EMAIL PROTECTED]
m.it' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 4
radius_xlat: 'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Valu
e,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username =
'font0001@' AN
D usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE
Username = '[EMAIL PROTECTED]
m.it' ORDER BY id'
radius_xlat: 'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Valu
e,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username =
'font0001@' AN
D usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sql): Released sql socket id: 4
modcall[authorize]: module "sql" returns ok for request 13
modcall: group authorize returns ok for request 13
rad_check_password: Found Auth-Type Local
auth: type Local
auth: user supplied CHAP-Password matches local User-Password
Login OK: [font0001@/] (from client Telecom-BRAS1-3 port 0)
Processing the post-auth section of radiusd.conf
modcall: entering group post-auth for request 13
modcall[post-auth]: module "main_pool" returns noop for request 13
rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0
rlm_ippool: Found a stale entry for ip/port: 83.216.178.213/0
rlm_ippool: num: 0
rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0
rlm_ippool: Allocating ip to nas/port: 83.216.176.254/0
rlm_ippool: num: 1
rlm_ippool: Allocated ip 83.216.178.190 to client on nas 83.216.176.254,port 0
modcall[post-auth]: module "whsitt_pool" returns ok for request 13
radius_xlat:
'/freerad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607'
rlm_detail:
/freerad100/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d
expands to /freer
ad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607
modcall[post-auth]: module "reply_log" returns ok for request 13
rlm_sql (sql): Processing sql_postauth
radius_xlat: 'font0001@'
rlm_sql (sql): sql_set_user escaped user --> 'font0001@'
radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values
('', '[EMAIL PROTECTED]
t', 'Chap-Password', 'Access-Accept', NOW())'
rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user,
pass, reply, date) values ('',
'font0001@', 'Chap-Password', 'Access-Accept', NOW())
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql (sql): Released sql socket id: 3
modcall[post-auth]: module "sql" returns ok for request 13
modcall: group post-auth returns ok f
