[Help-gnu-radius] Weird Behaviour

[Ben Casado]

We have a serious problem, we defined these two entries in our IPPOOL section looking to get our clients addresses assigned by our new gnu radius server instead of having the communications server assign them.

 

In summary, we want to assign addresses to our users from various ip pools that we will keep track of.  We would like to have a way to configure the starting ip, the ending ip for EACH individual nas.

 

This is what we did:

 

a) entered these in the users file:

 

IPPOOL  NAS-IP-Address = 10.10.10.1
        Framed-Protocol = PPP,
        Framed-IP-Address = 196.12.162.65+,
        Framed-IP-Netmask = 255.255.255.192,
        Framed-Routing = Broadcast-Listen,
        Framed-Filter-Id = "std.ppp",
        Framed-MTU = 1500,
        Framed-Compression = Van-Jacobson-TCP-IP

 

IPPOOL  NAS-IP-Address = 10.10.11.1
        Framed-Protocol = PPP,
        Framed-IP-Address = 196.12.182.65+,
        Framed-IP-Netmask = 255.255.255.192,
        Framed-Routing = Broadcast-Listen,
        Framed-Filter-Id = "std.ppp",
        Framed-MTU = 1500,
        Framed-Compression = Van-Jacobson-TCP-IP

 

username  Auth-Type = Local, Password = "12345", NAS-IP-Address = 66.108.198.79
        Match-Profile = "">        Fall-Through = Yes

 

 

b) Our expected results were NOT met, instead we get the following:

 

when username with password 12345 using NAS 10.10.10.1 gets authenticated they ALWAYS gets 196.12.162.65, NOT DIFFERENT addresses as in a dynamic pool.

 

also, we were NOT able to find out how to limit the pool, for example, the pool starting address will be 192.168.0.1 to 192.168.0.62.

*******************************************************************************************************************
*******************************************************************************************************************
Scanned by an email protection software that checks: Content, Attachments, Security and Viruses
Brought to you by ICENetworks.com, eScan and MailScan
*******************************************************************************************************************
*******************************************************************************************************************