rlm_ippool
Synopsis
Does server-side ip pool management. Should be added in post-auth
and accounting
sections.
The module also requires the existence of the Pool-Name
attribute, so that the administrator can add the Pool-Name attribute in the user profiles and use different pools for different users. The Pool-Name attribute is a check
item, not a reply item. The Pool-Name should be set to the ippool
module instance name or to DEFAULT
to match any module.
radiusd.conf |
ippool students { […] } |
ippool teachers { […] } |
|
users file |
DEFAULT Group == students, Pool-Name := "students" |
DEFAULT Group == teachers, Pool-Name := "teachers" |
|
DEFAULT Group == other, Pool-Name := "DEFAULT" |
Warning
|
If the range parameters are changed then the DB files must be erased. |
Processing Sections
Any.
Expansions
None.
Directives
- Syntax
-
cache-size = integer
- Default
-
800
- Description
-
The
gdbm
cache size for thedb
files. Should be equal to the number of ips available in the ip pool.
- Syntax
-
ip-index = string
- Default
-
${db_dir}/db.ipindex
- Description
-
Helper db index file used in
multilink
.
- Syntax
-
key = string
- Default
-
%{NAS-IP-Address} %{NAS-Port}
- Description
-
The key to use for the session database (which holds the allocated ips); normally, it should just be the
nas ip/port
(which is the default). If yourNAS
sends the same value ofNAS-Port
for all requests, the key should be based on some other attribute that is in ALL requests, AND is unique to each machine needing an IP address.
- Syntax
-
maximum-timeout = integer
- Default
-
0
- Description
-
Specifies the maximum time in seconds that an entry may be active. If set to zero, it means
no timeout
. The default value is 0.
- Syntax
-
netmask = string FIXME
- Default
-
255.255.255.0
- Description
-
The network mask used for this pool.
- Syntax
-
override = boolean
- Default
-
no
- Description
-
If set, the
Framed-IP-Address
already in the reply (if any) will be discarded and replaced with aFramed-IP-Address
assigned here.
- Syntax
-
range-start = string FIXME
- Default
-
192.168.1.1
- Description
-
The start ip address for this pool.
- Syntax
-
range-stop = string FIXME
- Default
-
192.168.3.254
- Description
-
The end ip address for this pool.
- Syntax
-
session-db = string
- Default
-
${db_dir}/db.ippool
- Description
-
The main db file used to allocate addresses.