› Forums › Network Management › ZeroShell › Openvpn & RadiusProxy & PEAP & MS IAS
- This topic is empty.
-
AuthorPosts
-
January 20, 2009 at 2:45 pm #41412
hzengin
MemberHello,
I’m using zeroshell as a ssl vpnserver, I configured radius proxy to microsoft IAS with SSL certificate. My active directory users authenticate with their Active directory username and password and get the IP address from IP pool on the zeroshell-openvpn. Some of the my users have a static IP information on the active directory Dial in tab. When they users log in to vpn cannot get the static ip information from ActiveDirectory.
what is the problem? is there any way to assign static ip to some users?
thank you
HuseyinJanuary 20, 2009 at 7:14 pm #47440imported_fulvio
ParticipantZeroshell can only use an IAS RADIUS server for authentication, but does not interpret the RADIUS attributes such as the IP address to be assigned to a user.
Regards
FulvioJanuary 20, 2009 at 9:18 pm #47441hzengin
Memberthank you for your reply.
is there any meyhod for the static ip? may I can create local user for static ip usage.
January 20, 2009 at 10:25 pm #47442imported_fulvio
ParticipantThe only method to automatically assign a static IP address is to use the dhcp server including the mac address of the clients.
Regards
FulvioJanuary 21, 2009 at 9:27 am #47443hzengin
MemberCan I use this dhcp pool/static pool for vpn users? I cant see any option on vpn settings page. I have a ip range on the vpn settings. Have can I use this pool with the dhcp’s pool?
January 21, 2009 at 1:21 pm #47444fadjar340
MemberIf you set in bridge mode of the VPN connection, just connect and DHCP will handle it.
If you want some like static IP with DHCP, put MAC address accordingly to the IP that you want.Regards,
Fadjar TandabawanaJanuary 22, 2009 at 1:10 pm #47445hzengin
MemberThank you Fadjar,
Dhcp works with vpn and handeld ip requests. But I have a another problem with dhcp. If I provide IP address with vpn server clients get some command like below: and routing works great
Thu Jan 22 13:56:10 2009 Route addition via IPAPI succeeded
Thu Jan 22 13:56:10 2009 route DELETE 0.0.0.0 MASK 0.0.0.0 172.18.5.1
Thu Jan 22 13:56:10 2009 Route deletion via IPAPI succeeded
Thu Jan 22 13:56:10 2009 route ADD 0.0.0.0 MASK 0.0.0.0 172.24.4.1
Thu Jan 22 13:56:10 2009 Route addition via IPAPI succeeded
Thu Jan 22 13:56:10 2009 Initialization Sequence CompletedSENT CONTROL [zeroshell.example.com]: ‘PUSH_REQUEST’ (status=1)
Thu Jan 22 13:56:07 2009 PUSH: Received control message: ‘PUSH_REPLY,route-gateway 172.24.4.1,redirect-gateway,dhcp-option DNS 193.140.62.200,,ping 5,ping-restart 60,ifconfig 172.24.4.158 255.255.255.0’But this request and control commands cannot get from the server with dhcp server. some fields comes blank.
SENT CONTROL [zeroshell.example.com]: ‘PUSH_REQUEST’ (status=1)
Thu Jan 22 14:56:34 2009 PUSH: Received control message: ‘PUSH_REPLY,,,,,ping 5,ping-restart 60’
Thu Jan 22 14:56:34 2009 OPTIONS IMPORT: timers and/or timeouts modifiedwhat is the differences vpn dhcp and dhcp server?
January 22, 2009 at 6:16 pm #47446imported_fulvio
ParticipantThis is because if you use the dhcp to assign the IP addresses to the road warrior VPN clients then it is useless push parameters such as the default gateway and the DNS which can be assigned by the dhcp server.
Regards
Fulvio -
AuthorPosts
- You must be logged in to reply to this topic.