FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread sachin.sharma
Hello all, I am implementing Free Radius to authenticate DHCP Requests with Option82. I have configured DHCP Relay Agent, DHCP Snooping in CISCO Switch and DHCP Server. Now i have to configure RADIUS for option82. Please help me to configure RADIUS for DHCP option82. Also i am not clear who

Re: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread Fajar A. Nugraha
On Wed, Feb 22, 2012 at 3:16 PM, sachin.sha...@wipro.com wrote: Hello all, I am implementing Free Radius to authenticate DHCP Requests with Option82. I have configured DHCP Relay Agent, DHCP Snooping in CISCO Switch and DHCP Server. Now i have to configure RADIUS for option82. Are you

Re: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread Alan DeKok
sachin.sha...@wipro.com wrote: I am implementing Free Radius to authenticate DHCP Requests with Option82. I have configured DHCP Relay Agent, DHCP Snooping in CISCO Switch and DHCP Server. Now i have to configure RADIUS for option82. What does that mean? It's like saying configure a web

RE: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread sachin.sharma
+sachin.sharma=wipro@lists.freeradius.org] On Behalf Of Fajar A. Nugraha Sent: Wednesday, February 22, 2012 2:29 PM To: FreeRadius users mailing list Subject: Re: FreeRadius to authenticate DHCP Requests with Option82 On Wed, Feb 22, 2012 at 3:16 PM, sachin.sha...@wipro.com wrote: Hello all

Re: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread Alan DeKok
sachin.sha...@wipro.com wrote: I already configured DHCP Server that handles option 82 of DHCP Requests. But new to RADIUS stuff. For security reasons, We want to introduce radius so DHCP Offer is to be made only to authenticated clients. Ah. That isn't a common configuration. But it

Re: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread Johan Meiring
On 2012/02/22 01:10 PM, Alan DeKok wrote: Yes. If you use FreeRADIUS for both RADIUS and DHCP, you can track user status in a database. When you receive a RADIUS packet, update the database. When you receive a DHCP packet, query the database. Traditional DHCP servers (i.e. ISC)

Re: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread Fajar A. Nugraha
On Wed, Feb 22, 2012 at 7:03 PM, Johan Meiring jmeir...@pcservices.co.za wrote: Another option which we use very successfully is a Mikrotik DHCP server. It can talk to Freeradius. http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Server It works well. Good documentation. So basically the dhcp

Re: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread Marinko Tarlać
Hi Can you tell me something about performances? I'm using Mtik as NAS for PPPoE users and 500-600 online users per server is optimum according to my experiences (Quad core server, 2GB RAM,...). ISC DHCP works very well for 6000 users and the same number of cable modems but I'm not sure is

Re: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread Alan DeKok
Marinko Tarlać wrote: Can you tell me something about performances? It all depends on the DB, because that's where IPs are stored. For a normal database, 1000 packets/s should be possible. I'm using Mtik as NAS for PPPoE users and 500-600 online users per server is optimum according to

Re: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread Marinko Tarlać
No No, you didn't understand me... Mtik is installed on the server (HP ML3xx series) and the optimum is 500-600 online PPPoE users... I achieved 1100 online PPPoE users per Mikrotik but the CPU load was always to high and the packet loss was to high (1-2%). The problem is visible because the