{"id":47,"date":"2008-07-18T00:00:00","date_gmt":"2008-07-18T00:00:00","guid":{"rendered":"http:\/\/netexpertise\/fr\/?p=47"},"modified":"2021-10-11T21:26:59","modified_gmt":"2021-10-11T20:26:59","slug":"pools-ips-freeradius","status":"publish","type":"post","link":"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html","title":{"rendered":"Retour d’Exp\u00e9rience sur les Pools IPs Freeradius"},"content":{"rendered":"\n

Si vous vous demandez s’il vaut mieux utiliser les modules rlm_ippool<\/a> ou rlm_sqlippool<\/a> pour transformer votre Radius en serveur \u00ab\u00a0DHCP\u00a0\u00bb avec les pools IP Freeradius, lisez ceci!
 <\/p>\n\n\n\n

rlm_ippool<\/h2>\n\n\n\n

Nous allons d’abord configurer Freeradius<\/a> pour fournir des adresses IPs via le module ippool. Les IPs sont stock\u00e9es dans un fichier de donn\u00e9es binaire.

<\/p>\n\n\n\n

\"\"\/<\/figure><\/div>\n\n\n\n


radiusd.conf<\/strong><\/p>\n\n\n\n

ippool main_pool {\n                range-start = 192.168.0.2\n                range-stop = 192.168.0.254\n                netmask = 255.255.255.0\n                cache-size = 800\n                session-db = ${raddbdir}\/db.ippool\n                ip-index = ${raddbdir}\/db.ipindex\n                override = yes\n                maximum-timeout = 0\n\naccounting {\n        main_pool\n}\n\npost-auth {\n        main_pool\n}<\/code><\/pre>\n\n\n\n
 
Users<\/strong>
Dans le fichier users, nous avons:<\/p>\n\n\n\n
DEFAULT         Pool-Name := main_pool\n                Fall-Through = Yes<\/code><\/pre>\n\n\n\n
Au d\u00e9marrage, db.ippool et db.ipindex sont cr\u00e9\u00e9s dans le r\u00e9pertoire de configuration.
 
Test<\/strong>
lease-duration est positionn\u00e9 \u00e0 10 dans sqlippool.conf \u00e0 des fins de tests. Les IPs devrainet donc \u00eatre rel\u00e2ch\u00e9es au bout de 10 secondes.
 <\/p>\n\n\n\n
# V\u00e9rifions le comportement lors d’une connexion
\necho \u00ab\u00a0Connexion de l’utilisateur test…\u00a0\u00bb
\necho \u00ab\u00a0User-Name=\\\u00a0\u00bbtest\\\u00a0\u00bb,User-Password=\\\u00a0\u00bbtest\\\u00a0\u00bb,NAS-IP-Address=\\\u00a0\u00bb127.0.0.1\\\u00a0\u00bb,\nNAS-Port=0″ | radclient localhost:1812 auth testing123
\necho \u00ab\u00a0User-Name=\\\u00a0\u00bbtest\\\u00a0\u00bb,Acct-Session-Id=\\\u00a0\u00bb6000006B\\\u00a0\u00bb,Acct-Status-Type=\\\u00a0\u00bbStart\\\u00a0\u00bb,\nNAS-IP-Address=\\\u00a0\u00bb127.0.0.1\\\u00a0\u00bb,NAS-Port=0″| radclient localhost:1813 acct testing123
\n\n# V\u00e9rification du nombre d’IPs affect\u00e9es – devrait \u00eatre 1\nrlm_ippool_tool -c etc\/raddb\/db.ippool etc\/raddb\/db.ipindex
\n=> 1
\n
\necho \u00ab\u00a0D\u00e9connexion de l’utilisateur test\u00a0\u00bb
\necho \u00ab\u00a0User-Name=\\\u00a0\u00bbtest\\\u00a0\u00bb,Acct-Session-Id=\\\u00a0\u00bb6000006B\\\u00a0\u00bb,Acct-Status-Type=\\\u00a0\u00bbStop\\\u00a0\u00bb,\nNAS-IP-Address=\\\u00a0\u00bb127.0.0.1\\\u00a0\u00bb,NAS-Port=0″| radclient localhost:1813 acct testing123
\n# V\u00e9rification du nombre d’IPs affect\u00e9es – devrait \u00eatre 0\nrlm_ippool_tool -c etc\/raddb\/db.ippool etc\/raddb\/db.ipindex
\n=> 0 – Bien!
\n\n

\n# V\u00e9rifions le fonctionnement du timeout
\necho \u00ab\u00a0Connexion de l’utilisateur test…\u00a0\u00bb
\necho \u00ab\u00a0User-Name=\\\u00a0\u00bbtest\\\u00a0\u00bb,User-Password=\\\u00a0\u00bbtest\\\u00a0\u00bb,NAS-IP-Address=\\\u00a0\u00bb127.0.0.1\\\u00a0\u00bb,\nNAS-Port=0″ | radclient localhost:1812 auth testing123
\necho \u00ab\u00a0User-Name=\\\u00a0\u00bbtest\\\u00a0\u00bb,Acct-Session-Id=\\\u00a0\u00bb6000006B\\\u00a0\u00bb,Acct-Status-Type=\\\u00a0\u00bbStart\\\u00a0\u00bb,\nNAS-IP-Address=\\\u00a0\u00bb127.0.0.1\\\u00a0\u00bb,NAS-Port=0″| radclient localhost:1813 acct testing123
\nrlm_ippool_tool -c etc\/raddb\/db.ippool etc\/raddb\/db.ipindex
\n=> 1
\n# Nous attendons jusqu’\u00e0 ce que le timeout soit atteint
\nsleep 11
\nrlm_ippool_tool -c etc\/raddb\/db.ippool etc\/raddb\/db.ipindex
\n=> 1
\nLe timeout ne fonctionne pas!\n<\/p>\n\n\n\n

rlm_sqlippool<\/h2>\n\n\n\n
 
radiusd.conf<\/strong>
Il faut d’abord monter Freeradius en version 1.1.7 ou plus r\u00e9cente et effectuer les changements suivants dans radiusd.conf:<\/p>\n\n\n\n
D\u00e9commenter \u00ab\u00a0$INCLUDE  ${confdir}\/sqlippool.conf\u00a0\u00bb, supprimer main_pool et ajouter sqlippool dans les sections accounting et post-auth sections.<\/p>\n\n\n\n
accounting {\n        sqlippool\n}\n\npost-auth {\n        sqlippool\n}<\/code><\/pre>\n\n\n\n
 
users<\/strong><\/p>\n\n\n\n
DEFAULT         Pool-Name := main_pool\n                Fall-Through = Yes<\/code><\/pre>\n\n\n\n
 
Cr\u00e9ation de pools d’IPs SQL<\/strong>
Ajouter la structure de la table radippool dans la base Mysql si n\u00e9cessaire (incluse dans FR):<\/p>\n\n\n\n
#\n# Table structure for table 'radippool'\n#\nCREATE TABLE radippool (\n  id                    int(11) unsigned NOT NULL auto_increment,\n  pool_name             varchar(30) NOT NULL,\n  FramedIPAddress       varchar(15) NOT NULL default '',\n  NASIPAddress          varchar(15) NOT NULL default '',\n  CalledStationId       VARCHAR(30) NOT NULL,\n  CallingStationID      VARCHAR(30) NOT NULL,\n  expiry_time           DATETIME NOT NULL default '0000-00-00 00:00:00',\n  username              varchar(64) NOT NULL default '',\n  pool_key              varchar(30) NOT NULL,\n  PRIMARY KEY (id)\n);<\/code><\/pre>\n\n\n\n
Et ajouter le fichier sqlippool.conf (fourni dans Freeradius)<\/p>\n\n\n\n
Ajouter le pool d’IPs dans la base<\/p>\n\n\n\n
mysql> INSERT INTO radippool (pool_name, framedipaddress) VALUES ('main_pool', '192.168.0.1');\nmysql> INSERT INTO radippool (pool_name, framedipaddress) VALUES ('main_pool', '192.168.0.2');\n[...]<\/code><\/pre>\n\n\n\n

R\u00e9sultats<\/h2>\n\n\n\n
Les m\u00eames tests fonctionnent avec le module rlm_sqlippool. Les IPs sont rel\u00e2ch\u00e9es apr\u00e8s 10 secondes.<\/p>\n\n\n\n
rlm_ippool conserve de plus en plus d’IPs et le pool finit par se remplir. Finalement, on doit remettre le pool \u00e0 z\u00e9ro ainsi que les connexions des clients, d’o\u00f9 diminution du taux de disponibilit\u00e9!
De plus, SQLippool est int\u00e9ressant lorsque l’on a plusieurs serveurs Radius servant les m\u00eames clients. Les pools d’IPs sont g\u00e9r\u00e9s au niveau de la base de donn\u00e9es, ce qui est tr\u00e8s appr\u00e9ciable dans ce cas pr\u00e9cis.<\/p>\n","protected":false},"excerpt":{"rendered":"
Si vous vous demandez s’il vaut mieux utiliser les modules rlm_ippool ou rlm_sqlippool pour transformer votre Radius en serveur \u00ab\u00a0DHCP\u00a0\u00bb avec les pools IP Freeradius, lisez ceci!  rlm_ippool Nous allons d’abord configurer Freeradius pour fournir des adresses IPs via le module ippool. Les IPs sont stock\u00e9es dans un fichier de donn\u00e9es binaire. radiusd.conf  UsersDans le […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false},"categories":[3],"tags":[403,407,404,9,7],"yoast_head":"\nNetexpertise - Retour d'Exp\u00e9rience sur les Pools IPs Freeradius<\/title>\n<meta name=\"description\" content=\"Retour d'exp\u00e9rience sur les modules rlm_ippool ou rlm_sqlippool pour transformer Freeradius en serveur DHCP avec les pools d'IPs\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Netexpertise - Retour d'Exp\u00e9rience sur les Pools IPs Freeradius\" \/>\n<meta property=\"og:description\" content=\"Retour d'exp\u00e9rience sur les modules rlm_ippool ou rlm_sqlippool pour transformer Freeradius en serveur DHCP avec les pools d'IPs\" \/>\n<meta property=\"og:url\" content=\"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html\" \/>\n<meta property=\"og:site_name\" content=\"Netexpertise\" \/>\n<meta property=\"article:published_time\" content=\"2008-07-18T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-10-11T20:26:59+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.netexpertise.eu\/uploads\/background-pattern-water-pool-sun-4320397.jpg\" \/>\n<meta name=\"author\" content=\"dave\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@netexpertise\" \/>\n<meta name=\"twitter:site\" content=\"@netexpertise\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html\",\"url\":\"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html\",\"name\":\"Netexpertise - Retour d'Exp\u00e9rience sur les Pools IPs Freeradius\",\"isPartOf\":{\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#website\"},\"datePublished\":\"2008-07-18T00:00:00+00:00\",\"dateModified\":\"2021-10-11T20:26:59+00:00\",\"author\":{\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632\"},\"description\":\"Retour d'exp\u00e9rience sur les modules rlm_ippool ou rlm_sqlippool pour transformer Freeradius en serveur DHCP avec les pools d'IPs\",\"breadcrumb\":{\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.netexpertise.eu\/fr\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Retour d’Exp\u00e9rience sur les Pools IPs Freeradius\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#website\",\"url\":\"https:\/\/www.netexpertise.eu\/fr\/\",\"name\":\"Netexpertise\",\"description\":\"Syst\u00e8mes \/ R\u00e9seaux \/ DevOps\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.netexpertise.eu\/fr\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632\",\"name\":\"dave\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/image\/\",\"url\":\"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g\",\"contentUrl\":\"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g\",\"caption\":\"dave\"},\"sameAs\":[\"http:\/\/www.netexpertise.eu\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Netexpertise - Retour d'Exp\u00e9rience sur les Pools IPs Freeradius","description":"Retour d'exp\u00e9rience sur les modules rlm_ippool ou rlm_sqlippool pour transformer Freeradius en serveur DHCP avec les pools d'IPs","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html","og_locale":"fr_FR","og_type":"article","og_title":"Netexpertise - Retour d'Exp\u00e9rience sur les Pools IPs Freeradius","og_description":"Retour d'exp\u00e9rience sur les modules rlm_ippool ou rlm_sqlippool pour transformer Freeradius en serveur DHCP avec les pools d'IPs","og_url":"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html","og_site_name":"Netexpertise","article_published_time":"2008-07-18T00:00:00+00:00","article_modified_time":"2021-10-11T20:26:59+00:00","og_image":[{"url":"http:\/\/www.netexpertise.eu\/uploads\/background-pattern-water-pool-sun-4320397.jpg"}],"author":"dave","twitter_card":"summary_large_image","twitter_creator":"@netexpertise","twitter_site":"@netexpertise","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html","url":"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html","name":"Netexpertise - Retour d'Exp\u00e9rience sur les Pools IPs Freeradius","isPartOf":{"@id":"https:\/\/www.netexpertise.eu\/fr\/#website"},"datePublished":"2008-07-18T00:00:00+00:00","dateModified":"2021-10-11T20:26:59+00:00","author":{"@id":"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632"},"description":"Retour d'exp\u00e9rience sur les modules rlm_ippool ou rlm_sqlippool pour transformer Freeradius en serveur DHCP avec les pools d'IPs","breadcrumb":{"@id":"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/www.netexpertise.eu\/fr\/reseau\/freeradius\/pools-ips-freeradius.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.netexpertise.eu\/fr"},{"@type":"ListItem","position":2,"name":"Retour d’Exp\u00e9rience sur les Pools IPs Freeradius"}]},{"@type":"WebSite","@id":"https:\/\/www.netexpertise.eu\/fr\/#website","url":"https:\/\/www.netexpertise.eu\/fr\/","name":"Netexpertise","description":"Syst\u00e8mes \/ R\u00e9seaux \/ DevOps","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.netexpertise.eu\/fr\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632","name":"dave","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/image\/","url":"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g","contentUrl":"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g","caption":"dave"},"sameAs":["http:\/\/www.netexpertise.eu"]}]}},"_links":{"self":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/posts\/47"}],"collection":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/comments?post=47"}],"version-history":[{"count":0,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/posts\/47\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/media?parent=47"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/categories?post=47"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/tags?post=47"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}