Subversion Repositories configs

Rev

Go to most recent revision | Details | Last modification | View Log | RSS feed

Rev Author Line No. Line
4 - 1
# -*- text -*-
2
######################################################################
3
#
4
#	This is a virtual server that handles DHCP.
5
#
6
#		!!!! WARNING !!!!
7
#
8
#	This code is experimental, and SHOULD NOT be used in a
9
#	production system.  It is intended for validation and
10
#	experimentation ONLY.
11
#
12
#	In order for this to work, you will need to run configure:
13
#
14
#		$ ./configure --with-dhcp
15
#		$ make
16
#		$ vi share/dictionary
17
#
18
#	## Un-comment the line containing $INCLUDE dictionary.dhcp
19
#	## Then, save the file.
20
#
21
#		$ make install
22
#
23
#	DHCP is NOT enabled by default.
24
#
25
#	The goal of this effort is to get the code in front of
26
#	people who are interested in another DHCP server.
27
#	We NEED FEEDBACK, patches, bug reports, etc.  Especially patches!
28
#
29
#	Please contribute, or this work will be nothing more than
30
#	a curiosity.
31
#
32
#
33
#	Q: What does it do?
34
#	A: It allows the server to receive DHCP packets, and to
35
#	   respond with static, pre-configured DHCP responses.
36
#
37
#	Q: Does it do static/dynamic IP assignment?
38
#	A: No.  Or, maybe.  Try it and see.
39
#
40
#	Q: Does it read ISC configuration or lease files?
41
#	A: No.  Please submit patches.
42
#
43
#	Q: Does it have DHCP feature X?
44
#	A: No.  Please submit patches.
45
#
46
#	Q: Does it support option 82?
47
#	A: Yes.
48
#
49
#	Q: Does it support other options?
50
#	A: Maybe.  See dictionary.dhcp.  Please submit patches.
51
#
52
#	Q: It doesn't seem to do much of anything!
53
#	A: Exactly.
54
#
55
#	$Id$
56
#
57
######################################################################
58
 
59
#
60
#  The DHCP functionality goes into a virtual server.
61
#
62
server dhcp {
63
 
64
#  Define a DHCP socket.
65
#
66
#  The default port below is 6700, so you don't break your network.
67
#  If you want it to do real DHCP, change this to 67, and good luck!
68
#
69
#  You can also bind the DHCP socket to an interface.
70
#  See below, and raddb/radiusd.conf for examples.
71
#
72
#  This lets you run *one* DHCP server instance and have it listen on
73
#  multiple interfaces, each with a separate policy.
74
#
75
#  If you have multiple interfaces, it is a good idea to bind the
76
#  listen section to an interface.  You will also need one listen
77
#  section per interface.
78
#
79
#  FreeBSD does *not* support binding sockets to interfaces.  Therefore,
80
#  if you have multiple interfaces, broadcasts may go out of the wrong
81
#  one, or even all interfaces.  The solution is to use the "setfib" command.
82
#  If you have a network "10.10.0/24" on LAN1, you will need to do:
83
#
84
#  Pick any IP on the 10.10.0/24 network
85
#	$ setfib 1 route add default 10.10.0.1
86
#
87
#  Edit /etc/rc.local, and add a line:
88
#	setfib 1 /path/to/radiusd
89
#
90
#  The kern must be built with the following options:
91
#	options    ROUTETABLES=2
92
#  or any value larger than 2.
93
#
94
# The other only solution is to update FreeRADIUS to use BPF sockets.
95
#
96
listen {
97
	ipaddr = 127.0.0.1
98
	port = 6700
99
	type = dhcp
100
#	interface = lo0
101
 
102
	# The DHCP server defaults to allowing broadcast packets.
103
	# Set this to "no" only when the server receives *all* packets
104
	# from a relay agent.  i.e. when *no* clients are on the same
105
	# LAN as the DHCP server.
106
	#
107
	# It's set to "no" here for testing.
108
	broadcast = no
109
}
110
 
111
#  Packets received on the socket will be processed through one
112
#  of the following sections, named after the DHCP packet type.
113
#  See dictionary.dhcp for the packet types.
114
dhcp DHCP-Discover {
115
	update reply {
116
	       DHCP-Message-Type = DHCP-Offer
117
	}
118
 
119
	#  The contents here are invented.  Change them!
120
	update reply {
121
	        DHCP-Domain-Name-Server = 127.0.0.1
122
	        DHCP-Domain-Name-Server = 127.0.0.2
123
		DHCP-Subnet-Mask = 255.255.255.0
124
		DHCP-Router-Address = 192.168.1.1
125
		DHCP-IP-Address-Lease-Time = 86400
126
		DHCP-DHCP-Server-Identifier = 192.168.1.1
127
	}
128
 
129
	#  Do a simple mapping of MAC to assigned IP.
130
	#
131
	#  See below for the definition of the "mac2ip"
132
	#  module.
133
	#
134
	#mac2ip
135
 
136
	#  If the MAC wasn't found in that list, do something else.
137
	#  You could call a Perl, Python, or Java script here.
138
 
139
	#if (notfound) {
140
	# ...
141
	#}
142
 
143
	ok
144
}
145
 
146
dhcp DHCP-Request {
147
	update reply {
148
	       DHCP-Message-Type = DHCP-Ack
149
	}
150
 
151
	#  The contents here are invented.  Change them!
152
	update reply {
153
	        DHCP-Domain-Name-Server = 127.0.0.1
154
	        DHCP-Domain-Name-Server = 127.0.0.2
155
		DHCP-Subnet-Mask = 255.255.255.0
156
		DHCP-Router-Address = 192.168.1.1
157
		DHCP-IP-Address-Lease-Time = 86400
158
		DHCP-DHCP-Server-Identifier = 192.168.1.1
159
	}
160
 
161
	#  Do a simple mapping of MAC to assigned IP.
162
	#
163
	#  See below for the definition of the "mac2ip"
164
	#  module.
165
	#
166
	#mac2ip
167
 
168
	#  If the MAC wasn't found in that list, do something else.
169
	#  You could call a Perl, Python, or Java script here.
170
 
171
	#if (notfound) {
172
	# ...
173
	#}
174
 
175
	ok
176
}
177
 
178
#  If there's no named section for the packet type, then the packet
179
#  is processed through this section.
180
dhcp {
181
	# send a DHCP NAK.
182
	reject
183
}
184
 
185
 
186
}
187
 
188
######################################################################
189
#
190
#  This next section is a sample configuration for the "passwd"
191
#  module, that reads flat-text files.  It should go into
192
#  radiusd.conf, in the "modules" section.
193
#
194
#  The file is in the format <mac>,<ip>
195
#
196
#	00:01:02:03:04:05,192.168.1.100
197
#	01:01:02:03:04:05,192.168.1.101
198
#	02:01:02:03:04:05,192.168.1.102
199
#
200
#  This lets you perform simple static IP assignment.
201
#
202
######################################################################
203
 
204
#passwd mac2ip {
205
#	filename = ${confdir}/mac2ip
206
#	format = "*DHCP-Client-Hardware-Address:=DHCP-Your-IP-Address"
207
#	delimiter = ","
208
#}