Page MenuHomeVyOS Platform

Impossible to set a static IP address via RADIUS in IPoE
Closed, ResolvedPublicBUG

Description

Impossible to set static IP address via Radius in IPoE
Configuration
VyOS configuration

set service ipoe-server authentication mode 'radius'
set service ipoe-server authentication radius server 192.168.139.100 key 'gns3'
set service ipoe-server client-ip-pool name TEST gateway-address '192.168.0.1'
set service ipoe-server client-ip-pool name TEST subnet '192.168.0.0/24'
set service ipoe-server interface eth1

Freeradius

eth1     Cleartext-Password := "eth1"
         Framed-IP-Address = 192.168.0.10,
         Framed-IP-Netmask = 255.255.255.0

VyOS Log

Mar 21 14:46:04 TESTVYOS accel-ipoe[1829]: eth1:: recv [DHCPv4 Discover xid=2649d61b chaddr=0c:6f:30:1c:00:00 <Message-Type Discover> <Host-Name vyos> <Request-List Subnet,Broadcast,Router,DNS,Classless-Route,Domain-Name,MTU>]
Mar 21 14:46:04 TESTVYOS accel-ipoe[1829]: ipoe0:: create interface ipoe0 parent eth1
Mar 21 14:46:04 TESTVYOS accel-ipoe[1829]: ipoe0:: send [RADIUS(1) Access-Request id=1 <User-Name "eth1"> <NAS-Port 15> <NAS-Port-Id "ipoe0"> <NAS-Port-Type Ethernet> <Calling-Station-Id "0c:6f:30:1c:00:00"> <Called-Station-Id "eth1"> <User-Password 0x8fce354c8a00846d798126a3392dc912>]
Mar 21 14:46:04 TESTVYOS systemd-udevd[2221]: Using default interface naming scheme 'v240'.
Mar 21 14:46:04 TESTVYOS systemd-udevd[2221]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable.
Mar 21 14:46:04 TESTVYOS bgpd[984]: [EC 100663301] INTERFACE_STATE: Cannot find IF ipoe0 in VRF 0
Mar 21 14:46:04 TESTVYOS isisd[1015]: circuit already disconnected
Mar 21 14:46:04 TESTVYOS accel-ipoe[1829]: ipoe0:: recv [RADIUS(1) Access-Accept id=1 <Framed-IP-Address 192.168.0.10> <Framed-IP-Netmask 255.255.255.0>]
Mar 21 14:46:04 TESTVYOS accel-ipoe[1829]: ipoe0:eth1: eth1: authentication succeeded
Mar 21 14:46:04 TESTVYOS accel-ipoe[1829]: ipoe0:eth1: can't determine router address
Mar 21 14:46:04 TESTVYOS accel-ipoe[1829]: ipoe0:eth1: terminate
Mar 21 14:46:04 TESTVYOS accel-ipoe[1829]: ipoe0:eth1: ipoe: session finished

After investigation, I found errors in the Jinja template.
Ip-pool and gw-ip-address are added only if authentication = no-auth which is not correct.
https://github.com/vyos/vyos-1x/blob/equuleus/data/templates/accel-ppp/ipoe.config.tmpl#L33-L48

Details

Difficulty level
Unknown (require assessment)
Version
VyOS 1.3.6
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

a.apostoliuk changed the task status from Open to In progress.
a.apostoliuk claimed this task.
a.apostoliuk changed the task status from In progress to Needs testing.Apr 2 2024, 7:33 AM
a.apostoliuk closed this task as Resolved.
a.apostoliuk moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.7) board.
dmbaturin renamed this task from Impossible to set a static IP address via Radius in IPoE to Impossible to set a static IP address via RADIUS in IPoE.May 10 2024, 7:40 PM