Tak jsem to zkousel a nejde mi to :-(
Sitove karte jsem pridal IP adresy:
ip addr add 192.168.10.1/24 dev wlan0
ip addr add 192.168.20.1/24 dev wlan0
ip addr add 192.168.30.1/24 dev wlan0
Nastaveni DHCPD:
default-lease-time 3600;
max-lease-time 7200;
shared-network sit {
subnet 192.168.10.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
option domain-name-servers 192.168.10.1, 8.8.8.8;
option ntp-servers 192.168.10.1;
option domain-name "lan";
option broadcast-address 192.168.10.255;
option routers 192.168.20.1;
range 192.168.10.10 192.168.10.200;
authoritative;
}
subnet 192.168.20.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
option domain-name-servers 192.168.10.1, 8.8.8.8;
option ntp-servers 192.168.10.1;
option domain-name "lan";
option broadcast-address 192.168.20.255;
option routers 192.168.20.1;
range 192.168.20.2 192.168.20.100;
authoritative;
}
subnet 192.168.30.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
option domain-name-servers 192.168.10.1, 8.8.8.8;
option ntp-servers 192.168.10.1;
option domain-name "lan";
option broadcast-address 192.168.30.255;
option routers 192.168.30.1;
range 192.168.30.2 192.168.30.100;
authoritative;
}
}
Nastaveni IP pool v radiusu:
# cat /etc/freeradius/modules/ippool
ippool main_pool {
range-start = 192.168.1.1
range-stop = 192.168.3.254
netmask = 255.255.255.0
cache-size = 800
session-db = ${db_dir}/db.ippool
ip-index = ${db_dir}/db.ipindex
override = no
maximum-timeout = 0
}
ippool jedna {
range-start = 192.168.20.2
range-stop = 192.168.20.100
netmask = 255.255.255.0
cache-size = 200
session-db = ${db_dir}/db.ip-pool_jedna
ip-index = ${db_dir}/db.ip-index_jedna
override = no
maximum-timeout = 0
}
ippool dva {
range-start = 192.168.30.2
range-stop = 192.168.30.100
netmask = 255.255.255.0
cache-size = 200
session-db = ${db_dir}/db.ip-pool_dva
ip-index = ${db_dir}/db.ip-index_dva
override = no
maximum-timeout = 0
}
Uzivatele:
# cat /etc/freeradius/users
DEFAULT Framed-Protocol == PPP
Framed-Protocol = PPP,
Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "CSLIP"
Framed-Protocol = SLIP,
Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "SLIP"
Framed-Protocol = SLIP
DEFAULT Pool-Name := main_pool
Fall-Through = Yes
ahoj Cleartext-Password := "svete"
jedna Cleartext-Password := "jedna"
Pool-Name := "jedna"
dva Cleartext-Password := "dva"
Pool-Name := "dva"
Povoleni v sites enabled:
# cat /etc/freeradius/sites-enabled/default
post-auth {
main_pool
jedna
dva
# ...
}
accounting {
main_pool
jedna
dva
# ...
}
Jenze to porad nefunguje:
# echo 'User-Name="ahoj",User-Password="svete",NAS-IP-Address=127.0.0.1' | radclient 127.0.0.1 auth testing123 -x
Sending Access-Request of id 81 to 127.0.0.1 port 1812
User-Name = "ahoj"
User-Password = "svete"
NAS-IP-Address = 127.0.0.1
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=81, length=32
Framed-IP-Address = 192.168.2.82
Framed-IP-Netmask = 255.255.255.0
# echo 'User-Name="jedna",User-Password="jedna",NAS-IP-Address=127.0.0.1' | radclient 127.0.0.1 auth testing123 -x
Sending Access-Request of id 196 to 127.0.0.1 port 1812
User-Name = "jedna"
User-Password = "jedna"
NAS-IP-Address = 127.0.0.1
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=196, length=32
Framed-IP-Address = 192.168.1.69
Framed-IP-Netmask = 255.255.255.0
# echo 'User-Name="dva",User-Password="dva",NAS-IP-Address=127.0.0.1' | radclient 127.0.0.1 auth testing123 -x
Sending Access-Request of id 37 to 127.0.0.1 port 1812
User-Name = "dva"
User-Password = "dva"
NAS-IP-Address = 127.0.0.1
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=37, length=32
Framed-IP-Address = 192.168.2.82
Framed-IP-Netmask = 255.255.255.0
Kde delam chybu?
