4 |
- |
1 |
# -*- text -*-
|
|
|
2 |
######################################################################
|
|
|
3 |
#
|
|
|
4 |
# This is a virtual server that handles DHCP.
|
|
|
5 |
#
|
|
|
6 |
# !!!! WARNING !!!!
|
|
|
7 |
#
|
|
|
8 |
# This code is experimental, and SHOULD NOT be used in a
|
|
|
9 |
# production system. It is intended for validation and
|
|
|
10 |
# experimentation ONLY.
|
|
|
11 |
#
|
|
|
12 |
# In order for this to work, you will need to run configure:
|
|
|
13 |
#
|
|
|
14 |
# $ ./configure --with-dhcp
|
|
|
15 |
# $ make
|
|
|
16 |
# $ vi share/dictionary
|
|
|
17 |
#
|
|
|
18 |
# ## Un-comment the line containing $INCLUDE dictionary.dhcp
|
|
|
19 |
# ## Then, save the file.
|
|
|
20 |
#
|
|
|
21 |
# $ make install
|
|
|
22 |
#
|
|
|
23 |
# DHCP is NOT enabled by default.
|
|
|
24 |
#
|
|
|
25 |
# The goal of this effort is to get the code in front of
|
|
|
26 |
# people who are interested in another DHCP server.
|
|
|
27 |
# We NEED FEEDBACK, patches, bug reports, etc. Especially patches!
|
|
|
28 |
#
|
|
|
29 |
# Please contribute, or this work will be nothing more than
|
|
|
30 |
# a curiosity.
|
|
|
31 |
#
|
|
|
32 |
#
|
|
|
33 |
# Q: What does it do?
|
|
|
34 |
# A: It allows the server to receive DHCP packets, and to
|
|
|
35 |
# respond with static, pre-configured DHCP responses.
|
|
|
36 |
#
|
|
|
37 |
# Q: Does it do static/dynamic IP assignment?
|
|
|
38 |
# A: No. Or, maybe. Try it and see.
|
|
|
39 |
#
|
|
|
40 |
# Q: Does it read ISC configuration or lease files?
|
|
|
41 |
# A: No. Please submit patches.
|
|
|
42 |
#
|
|
|
43 |
# Q: Does it have DHCP feature X?
|
|
|
44 |
# A: No. Please submit patches.
|
|
|
45 |
#
|
|
|
46 |
# Q: Does it support option 82?
|
|
|
47 |
# A: Yes.
|
|
|
48 |
#
|
|
|
49 |
# Q: Does it support other options?
|
|
|
50 |
# A: Maybe. See dictionary.dhcp. Please submit patches.
|
|
|
51 |
#
|
|
|
52 |
# Q: It doesn't seem to do much of anything!
|
|
|
53 |
# A: Exactly.
|
|
|
54 |
#
|
|
|
55 |
# $Id$
|
|
|
56 |
#
|
|
|
57 |
######################################################################
|
|
|
58 |
|
|
|
59 |
#
|
|
|
60 |
# The DHCP functionality goes into a virtual server.
|
|
|
61 |
#
|
|
|
62 |
server dhcp {
|
|
|
63 |
|
|
|
64 |
# Define a DHCP socket.
|
|
|
65 |
#
|
|
|
66 |
# The default port below is 6700, so you don't break your network.
|
|
|
67 |
# If you want it to do real DHCP, change this to 67, and good luck!
|
|
|
68 |
#
|
|
|
69 |
# You can also bind the DHCP socket to an interface.
|
|
|
70 |
# See below, and raddb/radiusd.conf for examples.
|
|
|
71 |
#
|
|
|
72 |
# This lets you run *one* DHCP server instance and have it listen on
|
|
|
73 |
# multiple interfaces, each with a separate policy.
|
|
|
74 |
#
|
|
|
75 |
# If you have multiple interfaces, it is a good idea to bind the
|
|
|
76 |
# listen section to an interface. You will also need one listen
|
|
|
77 |
# section per interface.
|
|
|
78 |
#
|
|
|
79 |
# FreeBSD does *not* support binding sockets to interfaces. Therefore,
|
|
|
80 |
# if you have multiple interfaces, broadcasts may go out of the wrong
|
|
|
81 |
# one, or even all interfaces. The solution is to use the "setfib" command.
|
|
|
82 |
# If you have a network "10.10.0/24" on LAN1, you will need to do:
|
|
|
83 |
#
|
|
|
84 |
# Pick any IP on the 10.10.0/24 network
|
|
|
85 |
# $ setfib 1 route add default 10.10.0.1
|
|
|
86 |
#
|
|
|
87 |
# Edit /etc/rc.local, and add a line:
|
|
|
88 |
# setfib 1 /path/to/radiusd
|
|
|
89 |
#
|
|
|
90 |
# The kern must be built with the following options:
|
|
|
91 |
# options ROUTETABLES=2
|
|
|
92 |
# or any value larger than 2.
|
|
|
93 |
#
|
|
|
94 |
# The other only solution is to update FreeRADIUS to use BPF sockets.
|
|
|
95 |
#
|
|
|
96 |
listen {
|
|
|
97 |
ipaddr = 127.0.0.1
|
|
|
98 |
port = 6700
|
|
|
99 |
type = dhcp
|
|
|
100 |
# interface = lo0
|
|
|
101 |
|
|
|
102 |
# The DHCP server defaults to allowing broadcast packets.
|
|
|
103 |
# Set this to "no" only when the server receives *all* packets
|
|
|
104 |
# from a relay agent. i.e. when *no* clients are on the same
|
|
|
105 |
# LAN as the DHCP server.
|
|
|
106 |
#
|
|
|
107 |
# It's set to "no" here for testing.
|
|
|
108 |
broadcast = no
|
|
|
109 |
}
|
|
|
110 |
|
|
|
111 |
# Packets received on the socket will be processed through one
|
|
|
112 |
# of the following sections, named after the DHCP packet type.
|
|
|
113 |
# See dictionary.dhcp for the packet types.
|
|
|
114 |
dhcp DHCP-Discover {
|
|
|
115 |
update reply {
|
|
|
116 |
DHCP-Message-Type = DHCP-Offer
|
|
|
117 |
}
|
|
|
118 |
|
|
|
119 |
# The contents here are invented. Change them!
|
|
|
120 |
update reply {
|
|
|
121 |
DHCP-Domain-Name-Server = 127.0.0.1
|
|
|
122 |
DHCP-Domain-Name-Server = 127.0.0.2
|
|
|
123 |
DHCP-Subnet-Mask = 255.255.255.0
|
|
|
124 |
DHCP-Router-Address = 192.168.1.1
|
|
|
125 |
DHCP-IP-Address-Lease-Time = 86400
|
|
|
126 |
DHCP-DHCP-Server-Identifier = 192.168.1.1
|
|
|
127 |
}
|
|
|
128 |
|
|
|
129 |
# Do a simple mapping of MAC to assigned IP.
|
|
|
130 |
#
|
|
|
131 |
# See below for the definition of the "mac2ip"
|
|
|
132 |
# module.
|
|
|
133 |
#
|
|
|
134 |
#mac2ip
|
|
|
135 |
|
|
|
136 |
# If the MAC wasn't found in that list, do something else.
|
|
|
137 |
# You could call a Perl, Python, or Java script here.
|
|
|
138 |
|
|
|
139 |
#if (notfound) {
|
|
|
140 |
# ...
|
|
|
141 |
#}
|
|
|
142 |
|
|
|
143 |
ok
|
|
|
144 |
}
|
|
|
145 |
|
|
|
146 |
dhcp DHCP-Request {
|
|
|
147 |
update reply {
|
|
|
148 |
DHCP-Message-Type = DHCP-Ack
|
|
|
149 |
}
|
|
|
150 |
|
|
|
151 |
# The contents here are invented. Change them!
|
|
|
152 |
update reply {
|
|
|
153 |
DHCP-Domain-Name-Server = 127.0.0.1
|
|
|
154 |
DHCP-Domain-Name-Server = 127.0.0.2
|
|
|
155 |
DHCP-Subnet-Mask = 255.255.255.0
|
|
|
156 |
DHCP-Router-Address = 192.168.1.1
|
|
|
157 |
DHCP-IP-Address-Lease-Time = 86400
|
|
|
158 |
DHCP-DHCP-Server-Identifier = 192.168.1.1
|
|
|
159 |
}
|
|
|
160 |
|
|
|
161 |
# Do a simple mapping of MAC to assigned IP.
|
|
|
162 |
#
|
|
|
163 |
# See below for the definition of the "mac2ip"
|
|
|
164 |
# module.
|
|
|
165 |
#
|
|
|
166 |
#mac2ip
|
|
|
167 |
|
|
|
168 |
# If the MAC wasn't found in that list, do something else.
|
|
|
169 |
# You could call a Perl, Python, or Java script here.
|
|
|
170 |
|
|
|
171 |
#if (notfound) {
|
|
|
172 |
# ...
|
|
|
173 |
#}
|
|
|
174 |
|
|
|
175 |
ok
|
|
|
176 |
}
|
|
|
177 |
|
|
|
178 |
# If there's no named section for the packet type, then the packet
|
|
|
179 |
# is processed through this section.
|
|
|
180 |
dhcp {
|
|
|
181 |
# send a DHCP NAK.
|
|
|
182 |
reject
|
|
|
183 |
}
|
|
|
184 |
|
|
|
185 |
|
|
|
186 |
}
|
|
|
187 |
|
|
|
188 |
######################################################################
|
|
|
189 |
#
|
|
|
190 |
# This next section is a sample configuration for the "passwd"
|
|
|
191 |
# module, that reads flat-text files. It should go into
|
|
|
192 |
# radiusd.conf, in the "modules" section.
|
|
|
193 |
#
|
|
|
194 |
# The file is in the format <mac>,<ip>
|
|
|
195 |
#
|
|
|
196 |
# 00:01:02:03:04:05,192.168.1.100
|
|
|
197 |
# 01:01:02:03:04:05,192.168.1.101
|
|
|
198 |
# 02:01:02:03:04:05,192.168.1.102
|
|
|
199 |
#
|
|
|
200 |
# This lets you perform simple static IP assignment.
|
|
|
201 |
#
|
|
|
202 |
######################################################################
|
|
|
203 |
|
|
|
204 |
#passwd mac2ip {
|
|
|
205 |
# filename = ${confdir}/mac2ip
|
|
|
206 |
# format = "*DHCP-Client-Hardware-Address:=DHCP-Your-IP-Address"
|
|
|
207 |
# delimiter = ","
|
|
|
208 |
#}
|