Re: Option 82 DHCP Snooping + Freeradius auth of DHCP requests

2010-11-25 Thread Alan DeKok
Denis Iskandarov wrote: man you kidding me ? Your original message was unclear, vague, and confusing. i know that it's not dhcp request. It is DHCP server + Radius binding scheme. DHCP server getting request from client and asks RADIUS if this client allowed to obtain IP address. DHCP

Re: Option 82 DHCP Snooping + Freeradius auth of DHCP requests

2010-11-25 Thread Denis Iskandarov
Thank you very much! I'll post my result negative/positive and share my experience. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Option 82 DHCP Snooping + Freeradius auth of DHCP requests

2010-11-24 Thread Denis Iskandarov
Hello! I'm trying to setup network with DHCP Snooping Option 82 functionality + Freeradius auth for DHCP requests. DHCP server which receives DHCP packets from cisco switch dhcp relay is Mikrotik RouterBoard. freeradius2-2.1.7-7.el5. Also updated dictionary from new 2.1.10 package Option 82 works

Re: Option 82 DHCP Snooping + Freeradius auth of DHCP requests

2010-11-24 Thread Alan DeKok
Denis Iskandarov wrote: Hello! I'm trying to setup network with DHCP Snooping Option 82 functionality + Freeradius auth for DHCP requests. DHCP server which receives DHCP packets from cisco switch dhcp relay is Mikrotik RouterBoard. freeradius2-2.1.7-7.el5. Also updated dictionary from new

Re: Option 82 DHCP Snooping + Freeradius auth of DHCP requests

2010-11-24 Thread Denis Iskandarov
So as i understood one of the problems is that Freeradius can't find username which is in mac-address format. Beside users file i've added same user to sql base, UI with daloRADIUS. radius can't find this username there as well. P.S.: sql+ daloradius are working fine for eap user/pass

Re: Option 82 DHCP Snooping + Freeradius auth of DHCP requests

2010-11-24 Thread Denis Iskandarov
Also I did this check from daloradius: Executed: echo User-Name='00:0C:42:40:40:38',User-Password= | radclient -c '1' -n '3' -r '3' -t '3' -x '127.0.0.1:1812' 'auth' 'testing123' 21 Results: Sending Access-Request of id 3 to 127.0.0.1 port 1812 User-Name = 00:0C:42:40:40:38 rad_recv:

Re: Option 82 DHCP Snooping + Freeradius auth of DHCP requests

2010-11-24 Thread Denis Iskandarov
Ok. DHCP server asking radius what to do with dhcp-request. radius gives accept if username -mac-address is in it's database, plus adding framed-ip-address and some other atributes to reply. as i understood from debug, freeradius can't find username (which is mac address, and sent in User-Name

Re: Option 82 DHCP Snooping + Freeradius auth of DHCP requests

2010-11-24 Thread Alan DeKok
Denis Iskandarov wrote: DHCP server asking radius what to do with dhcp-request. radius gives accept if username -mac-address is in it's database, plus adding framed-ip-address and some other atributes to reply. Except that a User-Name is never in a DHCP request. as i understood from debug,

DHCP with option 82 best practice

2010-10-18 Thread Zietz, Marco
Hi everybody, at first I want to thank Arran and Alan for their help with my last post. Good job! Had trouble getting the lists reply's, but solved now. I am curious if somebody could share information how to get FR as DHCP with option 82 authentication up and running. Couldn't find much

Re: DHCP with option 82 best practice

2010-10-18 Thread Phil Mayers
On 10/18/2010 05:05 PM, Zietz, Marco wrote: I am curious if somebody could share information how to get FR as DHCP with option 82 authentication up and running. Couldn't find much information in provided sample files and on the net. My own experiments with auth configs were not particularly

Re: DHCP with option 82 best practice

2010-10-18 Thread Alan DeKok
Zietz, Marco wrote: I am curious if somebody could share information how to get FR as DHCP with option 82 authentication up and running. I don't know what option 82 authentication means. Couldn't find much information in provided sample files and on the net. My own experiments with auth

Re: Option 82 parse problems.

2010-05-28 Thread Alan DeKok
-Relay-Agent-Information = 0x01060004006402080006000cce477c00 Yes... this was fixed in 2.1.9. Don't expect 2.1.8 to parse option 82. How can I get DHCP-Agent-Circuit-Id and DHCP-Agent-Remote-Id without using perl post_auth ? 2.1.9 was tested to work. 2. There is announced feature

Re: Option 82 parse problems.

2010-05-28 Thread Anton
Ok. Please see attach. But I'm afraid that is may only case, my unfortunate radius configuration. This is not directly received from the switch packet but from switch-dhcrelay. On Fri, 28 May 2010 13:11:57 +0700 Alan DeKok al...@deployingradius.com wrote: Please supply a packet trace

Re: Option 82 parse problems.

2010-05-28 Thread Alan DeKok
Anton wrote: Ok. Please see attach. But I'm afraid that is may only case, my unfortunate radius configuration. It looks to be a bug in 2.1.9. I'll see if I can put a fix into 'git', the v2.1.x branch in the next few days. Alan DeKok. - List info/subscribe/unsubscribe? See

Option 82 parse problems.

2010-05-27 Thread Anton
Good day. I'm trying to set freeradius like dhcp server with option 82 parsing and SQL data lookup. Now I use versions 2.1.8 and 2.1.9 with exactly the same configs and there is no SQL configuration yet, only default dhcp config with my test diff (see below). I have two questions for now: 1

option 82

2010-02-26 Thread Kevin Croes
Hi, I work at an ISP and we are looking at the possibility to use option 82 in FreeRADIUS. The other side is going to send us an ordernumber and then we want to send a configuration back (an ip address etc.). Been searching how to do this in FreeRADIUS, but haven't found much useful information

Re: option 82

2010-02-26 Thread Alan DeKok
Kevin Croes wrote: I work at an ISP and we are looking at the possibility to use option 82 in FreeRADIUS. In what, DHCP? RADIUS? The other side is going to send us an ordernumber and then we want to send a configuration back (an ip address etc.). I have no idea what that means

Re: option 82

2010-02-26 Thread Bryan Campbell
Google Radius DHCP client and start reading. :-) FWIW - This isn't a Freeradius question. b...@misn.com Alan DeKok wrote: Kevin Croes wrote: I work at an ISP and we are looking at the possibility to use option 82 in FreeRADIUS. In what, DHCP? RADIUS? The other side is going

Re: option 82

2010-02-26 Thread Arne Larsen
Kevin Croes wrote: Hi, I work at an ISP and we are looking at the possibility to use option 82 in FreeRADIUS. The other side is going to send us an ordernumber and then we want to send a configuration back (an ip address etc.). Been searching how to do this in FreeRADIUS, but haven't found