[Chilli] Assign IP address to AP through radius

[Eric Chaves]

Hi Patil,

Thanks! I'll test this tomorrow and let you know the results. Just so I can
understand, how would this impact other devices not listed in my macallowed?

Cheers,

--
Eric Chaves
(11) 98139-9880


2014-02-10 16:15 GMT-02:00 Ravikant Patil <ravikant.4784 at gmail.com>:

> Hi Eric,
>
> I haven't tried it yet but adding following options to config file
> probably will work.
>
>    - macauth                 Authenticate based on MAC address
>    (default=off)
>
>
>    - strictmacauth           Be strict about MAC Auth (no DHCP reply
>    until we get RADIUS reply)  (default=off)
>
>
> Thanks and Regards,
> Ravikant
>
>
> On Mon, Feb 10, 2014 at 8:49 PM, Eric Chaves <eric at craftti.com.br> wrote:
>
>> Hi Folks,
>>
>> The Access Points used in my hotspot environment are configured to obtain
>> it's IP address from DHCP and I would like to have coova assigning some
>> pre-defined values for it.
>>
>> I though I could do this by having the AP authenticating itself via mac
>> address and with my radius server, so after reading the man pages and some
>> posts on the forum I configured my environment the following way:
>>
>> At chilli controller, I have the following parameters in
>> /etc/chilli/local.conf
>>
>> defsessiontimeout=3600
>> defidletimeout=600
>> definteriminterval=600
>>  moreif=eth3
>> dhcpstart=500
>> macallowed=XX-XX-XX-XX-XX-XX,ZZ-ZZ-ZZ-ZZ-ZZ-ZZ
>> macpasswd=secret-password
>>
>> And in my radius server I added two users named 'XX-XX-XX-XX-XX-XX' and
>> 'ZZ-ZZ-ZZ-ZZ-ZZ' and I add a Framed-IP-Address and Framed-IP-Netmask values
>> in radius responses for, whose value dos not overlap with the dhcpstart
>> parameter.
>>
>> I've tested my setup using radtest and confirmed that the authentication
>> is working and response contains those AVP mentioned however the AP is
>> getting a regular address from DHCP (above dhcpstart) instead of the ones
>> sent in the radius reply.
>>
>> Did I misunderstood the macallowed feature? What should I do to have it
>> working as desired?
>>
>> Once again thanks for all the help so far.
>>
>> Cheers,
>>
>> Eric
>>
>> _______________________________________________
>> Chilli mailing list
>> Chilli at coova.org
>> http://lists.coova.org/cgi-bin/mailman/listinfo/chilli
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.coova.org/pipermail/chilli/attachments/20140210/2db26ce1/attachment.html>