of supplicants in the database?
How sqlippoll works? does it work as a DHCP server?
Is it posible to setup Freeradius with DHCP module to server diferents
VLANs?
Thanks for all.
Fernando
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
to leases this
IP address. This setup work sucefully but IP address of supplicants
doesn't stored in the database.
Is there any setup to store IP address of supplicants in the database?
How sqlippoll works? does it work as a DHCP server?
Is it posible to setup Freeradius with DHCP module to server
. It could also work with NAS which forward DHCP traffic as RADIUS
Access-Requests.
Is it posible to setup Freeradius with DHCP module to server diferents VLANs?
Just use DHCP relays.
Arran Cudbard-Bell a.cudba...@freeradius.org
FreeRADIUS Development Team
-
List info/subscribe/unsubscribe
New article on wiki:
http://wiki.freeradius.org/dhcp-for-static-ip-allocation
Please let me know your thoughts.
2013/3/3 Alan DeKok al...@deployingradius.com:
Leo Combes wrote:
As additional information, I tried with PPA version in Debian and do
not work (same problem).
Maybe is a problem
Leo Combes wrote:
As additional information, I tried with PPA version in Debian and do
not work (same problem).
Maybe is a problem in my server.
Maybe. I've just been running it with an Ubuntu 12.04 system, and it
seems to work for me. I didn't install selinux, firewalls, or anything
else.
.
...and it can go onto WIKI/HOWTO
alan
Install DHCP for static IP allocation in Freeradius.
Example based on Debian.
Freeradius as DHCP server for static ip allocation from MySQL, with
use of DHCP options.
Might work for provision of cable modems.
One important thing! (specially Ubuntu users): (*)
DHCP
Leo Combes wrote:
One important thing! (specially Ubuntu users):(*)
DHCP functionality will not work when installed from PPA, or at least
the package version 2.2.0 + dfsg-ppa10 not work.
Reason: I dont know. I installed and configured without errors, seems
to respond correctly OFFER
That might be an Ubuntu security setting. It seems to work fine on my
systems. So it's hard to track down what's happening on other systems.
Alan DeKok.
As additional information, I tried with PPA version in Debian and do
not work (same problem).
Maybe is a problem in my server.
-
List
Hi,
I installed Freeradius from PPA.
https://launchpad.net/~freeradius/+archive/stable
DHCP functionality not work when installed from PPA, or at least the
package version 2.2.0 + dfsg-ppa10 not work.
Reason: installed and configured without errors, seems to respond
correctly OFFER
I apollogize for the late response, I have been very busy and I
couldn't keep working on this.
I found the problem!
(at least it works now)
I installed Freeradius from PPA.
https://launchpad.net/~freeradius/+archive/stable
DHCP functionality not work when installed from PPA, or at least
2013/1/23 a.l.m.bu...@lboro.ac.uk:
hi,
those ID values look a little 'wierd' - vary large and negative
I don't understand where this values came from? which would be the
normal values?
does the DHCP response leave the server? do you have anything
like dHCP snooping on the network that
Leo Combes wrote:
2013/1/23 a.l.m.bu...@lboro.ac.uk:
those ID values look a little 'wierd' - vary large and negative
I don't understand where this values came from? which would be the
normal values?
It's fine. Don't worry about it.
does the DHCP response leave the server? do you
/freeradius/sqlippool.conf
including configuration file /etc/freeradius/sql/mysql/ippool.conf
including configuration file /etc/freeradius/policy.conf
including files in directory /etc/freeradius/sites-enabled/
including configuration file /etc/freeradius/sites-enabled/dhcp
including configuration file
hi,
those ID values look a little 'wierd' - vary large and negative
does the DHCP response leave the server? do you have anything
like dHCP snooping on the network that might be blocking the
responses from this new DHCP server or is the client getting
its answers from a.n.another DHCP
Thanks Alan.
I hope to make it work.
As I have little experience with Freeradius, I want to start doing a little
test with the mac2ip module.
I made a file called mac2ip in /etc/freeradius with the following contents:
00:13:96:00:f9:84,10.1.100.1
The /etc/freeradius/sites-enabled/dhcp
Leo Combes wrote:
Thanks Alan.
I hope to make it work.
As I have little experience with Freeradius, I want to start doing a
little test with the mac2ip module.
I made a file called mac2ip in /etc/freeradius with the following contents:
00:13:96:00:f9:84,10.1.100.1
OK.
I have added
Thanks again Alan.
At last I tried to run freeradius:
Please use radiusd -X, not radiusd -Xx
OK.
Info: server dhcp {
Debug: Trying sub-section dhcp DHCP-Discover {...}
Info: +- entering group DHCP-Discover {...}
Info: ++[reply] returns noop
Info: ++[reply] returns noop
On 22.01.2013 22:58, Leo Combes wrote:
Can you follow doc/bugs? It will tell you how to post more debugging
information so we can see exactly where it's going wrong.
I don't know how to do that. Any link on how to do it?
/usr/share/doc/freeradius/bugs
or
Hello.
I successfully run ISC-DHCP server for provisioning modems in an ISP's
network, but what I wanted to try is something more modern and with
database support.
I want to try using Freeradius as DHCP server, but first I want to know if
it is possible with these requirements:
- Need to deliver
Leo Combes wrote:
Hello.
I successfully run ISC-DHCP server for provisioning modems in an ISP's
network, but what I wanted to try is something more modern and with
database support.
I want to try using Freeradius as DHCP server, but first I want to know
if it is possible
: Friday, September 7, 2012 7:40 AM
To: FreeRadius users mailing list
Subject: Re: Freeradius as dhcp; parsing option82
Ilya A. Masandilov wrote:
CPU use by radiusd fell from 70% to 10-15. Great. Thank you Alan for
great dhcp functional ;)
You're welcome.
Version 2.2.0 should have
Hello!
We are using freeradius as dhcp server about two years. Its working
wery well, but.
We have all the DHCP logic written in rlm_perl script.
Now we have load ~900-1200 dhcp queries per sec, but 70% of them are
ignored(dependents of a vlan in option 82 (part of
DHCP
Здравствуйте, Ilya.
Вы писали 6 сентября 2012 г., 21:52:23:
Hello!
We are using freeradius as dhcp server about two years. Its working
wery well, but.
...
Heh, sorry, I found the solution =)
Somethink like this for example, to ignore vlan #1 (default on most
devices
Heh, sorry, I found the solution =)
Somethink like this for example, to ignore vlan #1 (default on most
devices):
if( %{DHCP-Relay-Circuit-Id} =~
/^0x([0-9a-f]{4})0001([0-9a-f]{4})$/i ) {
reject
}
Wow. After using this code ^ and also this (filter
this - I try to return attribute with only printable chars, and got
it in Context-Name exactly as it stored in DB.
So I urgently need help - how I can store needed value to adequately
accepted by Radius?
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL
.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5611684.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
IVB wrote:
Yes, I run queries by hand and see results as strings, non-printable chars
not printed, but attribute itself has non-zero length.
You can't put binary data into an ASCII string field.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5612096.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
IVB wrote:
But that was my question!
...
How I can put Opt82 attributes (which contains non-printable bytes) into
database to offer it later for FreeRADIUS using SELECT statement?
You don't.
The database is intended for ASCII data.
You could also edit the dictionaries to make the data
Hello Alan,
Monday, April 2, 2012, 1:59:03 PM, you wrote:
AD IVB wrote:
But that was my question!
AD ...
How I can put Opt82 attributes (which contains non-printable bytes) into
database to offer it later for FreeRADIUS using SELECT statement?
AD You don't.
Are you kidding?
AD The
Igor Belikov wrote:
AD You don't.
Are you kidding?
If you insist on going down that path, you'll be unsubscribed and
banned. I'm tried of people who can't read the documentation, and who
use that ignorance to put me down.
Do you mean that FreeRADIUS can't accept non-ASCII data from
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5612329.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
IVB wrote:
Hello Alan,
Yes, I will be very happy to read how to represent 'octets' data in
DB. And I ask about this several times. I don't find this info in
documentation, sorry.
Please give me link to right place.
I gave you a hint, and you deleted it.
Good luck.
Alan DeKok.
-
', '0x0006001e58ab0304', '==' )
Thanks to all for help.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5612364.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http
IVB wrote:
But I don't see in debug output what exactly was returned in SQL query.
Have you tried running the SQL queries from an SQL client on the
command line?
That's why they're printed out in debugging mode: so you can see them,
and re-run them yourself.
Alan DeKok.
-
List
english - it is not my native language.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5606148.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org
On Fri, Mar 30, 2012 at 4:29 PM, IVB i...@is.ua wrote:
I need help.
Software: FreeRADIUS v2.1.11, MySQL v5.1.61.
Hardware: RB SE100 under SEOS-6.4.1.4-Release
BRAS sends Opt-82 related attributes in following format:
What format?
Attributes Agent-* described in radius dictionary as
.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5606373.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
table' after check SQL, and reply SQL don't
executed. And finally I don't login.
But I don't see in debug output what exactly was returned in SQL query.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5606432.html
Sent from
On Fri, Mar 30, 2012 at 6:12 PM, IVB i...@is.ua wrote:
Agent-Circuit-Id = 0x000403fc0001
let's start with that one.
( '00:12:23:56:78:9A', 'Agent-Circuit-ID', x'000403fc0001', '==' ),
Does that work? Shouldn't it be something like
( '00:12:23:56:78:9A', 'Agent-Circuit-ID', 0x000403fc0001,
this and write results.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5606635.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Start off without it. If it works... it's good enough.
When I require any further pieces of information on this matter what would be
the preferred way of communication, e.g. should I keep using this thread or
open a new one on developer list?
Best regards,
Seppo
Seppo Sandberg wrote:
Start off without it. If it works... it's good enough.
When I require any further pieces of information on this matter what would be
the preferred way of communication, e.g. should I keep using this thread or
open a new one on developer list?
The devel list is
Hello,
maybe I'll try and rephrase my question. Which attribute should I modify with
update reply, e.g. in dhcp DHCP-Discover section of the sites-available/dhcp
file, if I wanted to redirect the message to another DHCP server?
Best regards,
Seppo
-
Seppo Sandberg wrote:
Hello,
maybe I'll try and rephrase my question. Which attribute should I modify with
update reply, e.g. in dhcp DHCP-Discover section of the sites-available/dhcp
file, if I wanted to redirect the message to another DHCP server?
You can't. DHCP relaying is not
Thank you for your swift reply.
You can't. DHCP relaying is not supported.
It shouldn't be hard to add, though. Patches are welcome.
If I was inclined to create such a patch how would we begin to tackle the
issue? I guess you would tell me how you would like to have it implemented?
Best
Seppo Sandberg wrote:
If I was inclined to create such a patch how would we begin to tackle the
issue? I guess you would tell me how you would like to have it implemented?
See src/main/dhcpd.c
Look for relay. Add a cache (hash table or rbtree) for XID, and
maybe (XID,MAC). Add entries
On 13/01/11 11:03, Alan DeKok wrote:
Seppo Sandberg wrote:
If I was inclined to create such a patch how would we begin to tackle the
issue? I guess you would tell me how you would like to have it implemented?
See src/main/dhcpd.c
Look for relay. Add a cache (hash table or rbtree) for
Phil Mayers wrote:
What's the rationale for keeping state?
Some security, IIRC.
I was under the impression that
DHCP relays could be stateless. Since you can chain relays, but replies
go straight back to the first one (via the giaddr field)
Yes. The ISC DHCP relay code doesn't store
For our purposes, storing state would allow us to know where to send
the reply. The ISC server walks through it's list of interfaces for
every reply. This is simple, but it would be safer to maintain state.
Is the bottom line that when implementing the dhcp relay there should be
caching
Seppo Sandberg wrote:
Is the bottom line that when implementing the dhcp relay there should be
caching included?
Start off without it. If it works... it's good enough.
What data exactly should be stored in the cache?
I'll have to think about that.
Alan DeKok.
-
List
Hello,
in Freeradius 2.1.10 is it possible to set up the dhcp server to serve as a
dhcp relay?
Best regards,
Seppo
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I'm playing with freeradius acting as DHCP-server - which is a
magnificent idea!
Got a little problem getting it up and running. Already checked any
comments in sources, list archive, recent git patches related to dhcp
and my favourite search engine. Also used two different machines
IIRC there were problems binding the server to IP addresses. Try just
binding to an interface or being promiscuous.
On 13/10/2010, Zietz, Marco marco.zi...@pfalzkom-manet.de wrote:
Hi,
I'm playing with freeradius acting as DHCP-server - which is a
magnificent idea!
Got a little problem
Hi,
I'm playing with freeradius acting as DHCP-server - which is a
magnificent idea!
Got a little problem getting it up and running. Already checked any
comments in sources, list archive, recent git patches related to dhcp
and my favourite search engine. Also used two different
01.08.2010 16:06, Alan DeKok пишет:
Urazaev Vadim wrote:
I`m trying to set up freeradius as dhcp server and everythins seem to be
ok, in radiusd -X I can see the DHCP-Discover packets that comes from
client and DHCP-Offer that server sending to client.
When I tried to find out to which
Hi All.
I`m trying to set up freeradius as dhcp server and everythins seem to be
ok, in radiusd -X I can see the DHCP-Discover packets that comes from
client and DHCP-Offer that server sending to client.
When I tried to find out to which interface server send`s responses I
saw that responses
Urazaev Vadim wrote:
I`m trying to set up freeradius as dhcp server and everythins seem to be
ok, in radiusd -X I can see the DHCP-Discover packets that comes from
client and DHCP-Offer that server sending to client.
When I tried to find out to which interface server send`s responses I
saw
01.08.2010 16:06, Alan DeKok пишет:
Update the FreeRADIUS code so that it uses a BPF socket on FreeBSD.
Or, run on a system with only one interface.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks for your answer.
-
List
Urazaev Vadim wrote:
Hello all.
I tried to configure freeradius to operate as dhcp server and reach the
point from where I can`t proceed.
the version of freeradius is 2.1.9
I have two situation
1. DHCP Discover packet comes from client who directly connected to
network which freerasdius
30.07.2010 10:27, Alan DeKok wrote:
Urazaev Vadim wrote:
Hello all.
I tried to configure freeradius to operate as dhcp server and reach the
point from where I can`t proceed.
the version of freeradius is 2.1.9
I have two situation
1. DHCP Discover packet comes from client who directly connected
including configuration file
/usr/local/etc/raddb/sites-enabled/control-socket
including configuration file /usr/local/etc/raddb/sites-enabled/dhcp
main {
user = freeradius
group = freeradius
allow_core_dumps = no
}
including dictionary file /usr/local/etc/raddb/dictionary
main
/sites-enabled/inner-tunnel
including configuration file
/usr/local/etc/raddb/sites-enabled/control-socket
including configuration file /usr/local/etc/raddb/sites-enabled/dhcp
main {
user = freeradius
group = freeradius
allow_core_dumps = no
}
including dictionary file /usr/local/etc/raddb/dictionary
On 07/30/2010 12:57 PM, Urazaev Vadim wrote:
[16 pages of debug output snipped for brevity]
Sorry Guys for disturb you, problem was in eval{} block in my perl
script inside which command return always return reject code.
Anyway Thanks for all.
And for that I had to page through 16 pages of
Hello all.
I tried to configure freeradius to operate as dhcp server and reach the
point from where I can`t proceed.
the version of freeradius is 2.1.9
I have two situation
1. DHCP Discover packet comes from client who directly connected to
network which freerasdius listen on.
2. DHCP Discover
Hi,
As I can see there is DHCP support in the Freeradius since 2.0.4.
I'd like to know how can I get it working? Which DHCP server can
cooperate with freeradius? What have I modify in freeradius?
The radius currently only authenticates wireless stations, and collects
accounting infos.
Kassai Istvan wrote:
I'd like to know how can I get it working? Which DHCP server can
cooperate with freeradius? What have I modify in freeradius?
./configure --with-dhcp
make
make install
It doesn't work with a DHCP server. It *is* a DHCP server.
It works with DHCP clients.
Alan
eradius.org] On Behalf Of Alan DeKok
Sent: Tuesday, November 10, 2009 12:06 PM
To: FreeRadius users mailing list
Subject: Re: Freeradius with DHCP
Kassai Istvan wrote:
I'd like to know how can I get it working? Which DHCP server can
cooperate with freeradius? What have I modify in freeradius
ZHANG Gina wrote:
Does this DHCP server assigns IP addresses from the ip address pool of
radius?
No. It requires code updates to allow the SQL IP pool module to
handle DHCP packets.
You *can* read static IP's from a text file or from an SQL DB. You
just can't dynamically assign them.
@lists.fre
eradius.org] On Behalf Of Alan DeKok
Sent: Tuesday, November 10, 2009 1:28 PM
To: FreeRadius users mailing list
Subject: Re: Freeradius with DHCP
ZHANG Gina wrote:
Does this DHCP server assigns IP addresses from the ip address pool of
radius?
No. It requires code updates to allow the SQL
Thanks. Can I somehow know, is my freeradius compiled with DHCP support?
I dont wanna recompile it if isnt needed.
Can I found an example, how to make this DHCP to assign IP-s from a
postgres database?
2009. 11. 10, kedd keltezéssel 19.06-kor Alan DeKok ezt írta:
Kassai Istvan wrote:
I'd
ZHANG Gina wrote:
Does version 2.1.3 have this functionality? Where is the document
describing the configuration?
It's in 2.1.3. The only documentation is in raddb/sites-available/dhcp
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Kassai Istvan wrote:
Thanks. Can I somehow know, is my freeradius compiled with DHCP support?
Try configuring DHCP. If it doesn't work, it isn't compiled in.
But it's not normally included.
I dont wanna recompile it if isnt needed.
Can I found an example, how to make this DHCP
, November 10, 2009 2:23 PM
To: FreeRadius users mailing list
Subject: Re: Freeradius with DHCP
ZHANG Gina wrote:
Does version 2.1.3 have this functionality? Where is the document
describing the configuration?
It's in 2.1.3. The only documentation is in
raddb/sites-available/dhcp
Alan DeKok
I dont wanna recompile it if isnt needed.
Can I found an example, how to make this DHCP to assign IP-s from a
postgres database?
No.
So I'm afraid I will ask some further questions about it :-)
Thanks for very quick answering.
-
List info/subscribe/unsubscribe? See
ro0ot [EMAIL PROTECTED] wrote:
Can I configure the system to let freeradius works with dhcp?
No, sorry.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
the internet.
What kind of a server do you think my university is using ?
Alan DeKok wrote:
ro0ot [EMAIL PROTECTED] wrote:
Can I configure the system to let freeradius works with dhcp?
No, sorry.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
M Singh [EMAIL PROTECTED] wrote:
Why not ?
Because freeradius working with dhcp means freeradius knows about dhcp.
My university implements something that looks like that. A laptop first
gets a DHCP lease, and can address a single IP which is presumably the
address of the server. Then I
Yep, thats what I mean...thanks Alan DeKok, :)
Probabily I have to find another solution, :-(
Regards,
ro0ot
Alan DeKok wrote:
M Singh [EMAIL PROTECTED] wrote:
Why not ?
Because freeradius working with dhcp means freeradius knows about dhcp.
My university implements something
Hi,
I am running Fedora Core 1 with the following software installed below: -
dhcp-3.0pl2-6.16
freeradius-0.9.1-1
Can I configure the system to let freeradius works with dhcp?
For example, it a user successfully authenticate with the freeradius, it
will assign an IP address.
Regards,
ro0ot
80 matches
Mail list logo