radius problem

[pichi]

hi everybiody,, i have a question ia have installed a linux sever red hat 7.2 and radius configured, is there a way i can set that a user that connect get always the same IP address (static address for that user)

thanks in advance

pichi

PS: i have tried but whenever the user connect get a different address

 

[RhythmAce]

Are you asking how to give users on your local network a static ip address? Just do it and turn off your dhcp server. If you are asking how to give your users an internet ip address, the answer is you can't. At least not just with radius and a linux box. Both seem to be very strange questions to me or maybe I don't understand. That has been known to happen to me more than once.

 

[pichi]

hi, sorry for the misunderstanding, i talk about dialup connections,, i want that my user from home to connect to a cisco router which is autenticated by a radius server on a linux, so my question how can i configure that radius so that user can copnnect from my home or using a dial up connection and always obtain the same ip address
hope i explain better

thanks

Pichi

 

[ady2k]

You can configure user file from Radius server.
And you can set the static IP from Radius user.
You want to radius user same as linux user or without link to linux user.
Good luck.

 

[MrTom]

testing Password="helo"
User-Service = Framed-User,
Framed-Protocol = MP,
Ascend-Route-IP=Route-IP-Yes,
Framed-Netmask = 255.255.255.0,
Framed-Address = 192.168.1.2


i may have missed something there, but the Framed-Address line is the important bit. if it doesn't work then just shout and i'll look at our configs - or google for 'Framed-Address'
you can also add the line
Ascend-IP-Direct = 192.168.1.1
which makes all traffic from the dialup pass through the firewall at 192.168.1.1 so you can restrict access to your network.

 

[verland]

You can also have the router handle getting the caller a static ip by adding a dialer map to your group async interface.
Something like:
router(config-if)# dialer map ip [ip address] name [name of user] #

for the user name part, if the client is running windoze, you might need to add the domain name, like domain\user

We haven't gotten radius-assigned IP's to work yet at my place but I set this up and it works fine. good luck!