I have a freeradius v3 running on my raspberry pi together with pihole. I have a external NGFW acting as a DHCP Server.
I want the freeradius to "forward" all DHCP requests to the firewall, to do so I wanted to configure it as a dhcp relay like in the docs -> https://freeradius.org/documentation/freeradius-server/4.0~alpha1/raddb/sites-available/dhcp.relay.html . My config /etc/freeradius/3.0/sites-available/dhcp.relay looks like this:
# -*- text -*-
######################################################################
#
# This is a virtual server that handles DHCP relaying
#
# Only one server can listen on a socket, so you cannot
# do DHCP relaying && run a DHCP server at the same time.
#
######################################################################
server dhcp.eth1 {
listen {
ipaddr = *
port = 67
type = dhcp
interface = eth1
}
# Packets received on the socket will be processed through one
# of the following sections, named after the DHCP packet type.
# See dictionary.dhcp for the packet types.
dhcp Discover {
&control.Relay-To-IP-Address := 10.10.1.1
&request.Gateway-IP-Address := 10.10.1.10
ok
}
dhcp Request {
&control.Relay-To-IP-Address := 10.10.1.1
&request.Gateway-IP-Address := 10.10.1.1
ok
}
}
10.10.1.10
is the ip of the pihole/freeradius10.10.1.1
is my ip of ngfw/dhcp server
My clients however do not get a DHCP lease.
Wireless LAN adapter Wi-Fi:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) Wi-Fi 6 AX201 160MHz
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::a6bf:884b:a8af:d632%21(Preferred)
Autoconfiguration IPv4 Address. . : 169.254.93.98(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 140565902
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-2A-B1-E8-CA-B4-45-06-33-F1-7A
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled
If I manually set a static ip on the clients I can ping/connect to my network and wan. Anyone got any ideas?
{}
-button. That way formatting will be preserved.