FreeRadius Framed-IP-Address

[Daniel Romero]

Hi.

I have freeradius working with eap/peap.
The users can autenthicate them, but the Framed-IP-Address don't work, they
can't get an ip address... but, if I connect an DHCP to the network, all
work fine: authentication->get address-> network access

What can be wrong with the Framed-IP-Address???

This is an example of successfuly connection:

...
Sending Access-Accept of id 44 to 192.168.100.185 port 1391
Framed-IP-Address := 192.168.100.211
Framed-IP-Netmask := 255.255.255.0
Framed-Protocol := PPP
Service-Type := Framed-User
Framed-Compression := Van-Jacobson-TCP-IP
Tunnel-Medium-Type:0 := IEEE-802
Tunnel-Type:0 := VLAN
MS-MPPE-Recv-Key =
0x1714c6bb40821fd973e97f7bbfa7a05110206fb083138414a453fb4c08ab3b56
MS-MPPE-Send-Key =
0x6d7baa66c5cea48be8998e1bf9b04a46ae59905700e923b6f9a1462da7ce3b22
EAP-Message = 0x032c0004
Message-Authenticator = 0x00000000000000000000000000000000
User-Name = "profesor01"
Finished request 8

[Alan DeKok]

Post by Daniel Romero
Hi.
I have freeradius working with eap/peap.
The users can autenthicate them, but the Framed-IP-Address don't work,

RADIUS cannot assign IP addresses when PEAP (or any 802.1x
authentication) is used.

Post by Daniel Romero
they can't get an ip address... but, if I connect an DHCP to the
network, all work fine: authentication->get address-> network access

Yes. That's the way it works.

Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Daniel Romero]

Cool hint... thanks again my master xD

So, IP address assign works only on ¿.....?

Post by Alan DeKok

Post by Daniel Romero
Hi.
I have freeradius working with eap/peap.
The users can autenthicate them, but the Framed-IP-Address don't work,

RADIUS cannot assign IP addresses when PEAP (or any 802.1x
authentication) is used.

Post by Daniel Romero
they can't get an ip address... but, if I connect an DHCP to the
network, all work fine: authentication->get address-> network access

Yes. That's the way it works.
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

[Alan DeKok]

Post by Daniel Romero
Cool hint... thanks again my master xD
So, IP address assign works only on ¿.....?

PPP. Dial-up...

Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html