Project

General

Profile

Actions

Bug #12563

open

OpenVPN server doesn't support Framed-IPv6-Address RADIUS attribute

Added by Viktor Gurov about 2 months ago. Updated about 2 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
OpenVPN
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
2.5.2
Affected Architecture:

Description

it only supports Framed-IP-Address,

see https://github.com/pfsense/pfsense/blob/master/src/etc/inc/openvpn.auth-user.php#L149:

if (isset($attributes['framed_ip'])) {
    if (isset($attributes['framed_mask'])) {
        $content .= "topology subnet\n";
        $content .= "ifconfig-push {$attributes['framed_ip']} {$attributes['framed_mask']}";
    } else {
        $content .= "topology net30\n";
        $content .= "ifconfig-push {$attributes['framed_ip']} ". long2ip((ip2long($attributes['framed_ip']) - 1));
    }
}

and https://github.com/pfsense/pfsense/blob/master/src/etc/inc/util.inc#L3457

Actions #1

Updated by Viktor Gurov about 2 months ago

  • Subject changed from OpenVPN server doesn't support Framed-IPv6-Address to OpenVPN server doesn't support Framed-IPv6-Address RADIUS attribute
Actions #2

Updated by Viktor Gurov about 2 months ago

current PHP RADIUS implementation doesn't support IPv6 attributes:
https://www.php.net/manual/en/radius.constants.attributes.php

Actions

Also available in: Atom PDF