Hi, We use freeradius sql with mt hotspot and have no problems. Just recently we had a need to specify a different IP pool for certain mac addresses. With these certain users we hope to just add the extra field into the sql database framed-pool

This works with hotspot and to-address is using an ip from specified pool.

However when enabling radius in dhcp server we get auth failed on radius dhcp requests.

1/ Does user-password need a blank password to auth with dhcp and can't be anything else?

So can I just clarify that your saying Freeradius can be setup to send access-accept when getting a dhcp request even if NAS is not sending password?

Can I just be clear what your saying can be setup only to authorize a DHCP request as it's important the hotspot continues to have same auth method and will not auth any password.

Sorry if i'm being thick but I have read the freeradius docs but can't seem to find exactly the right info your talking about?

NAS-Port-Type = Ethernet
NAS-Port = 2198977383
Framed-IP-Address = 192.0.2.2
Called-Station-Id = "dhcp1"
User-Name = "01:23:45:67:AB:CD"
User-Password = ""
NAS-Identifier = "myrouter.domain.tld

authorize {
  if(NAS-Port-Type == Ethernet && NAS-Port && !Service-Type && Called-Station-Id =~ /^dhcp[0-9]+$/){
    # Username is a MAC address and password is blank
    if(User-Name =~ /^([0-9A-F]{2}:?){6}$/ && User-Password == ''){

      # Set password to 'User-Name' to facilitate proper lookup in 'users' file or SQL radcheck table
      update request {
        User-Password = "%{User-Name}"
      }
    }
  }

  files
  sql
  chap
  pap
  …etc
}

Got one more slight problem. DHCp is authing and assigning correct pool fine. But when the hotspot authenticates however because it sees Framed-Pool it assigns another IP on hotspot to-address so two IPs are used!!

Do you know if there is a rule like above that can omit the radreply Framed-Pool when a hotspot auth request comes in?

post-auth {
  if(reply:Framed-Pool){
    update reply {
      Framed-Pool !* 0
    }
  }
}