Установка и настройка DHCP-сервера FreeRADIUS

server dhcp {
listen {
    ipaddr = 123.123.123.123
#    interface = em0
    port = 67
    type = dhcp
    broadcast = yes
}
dhcp DHCP-Discover {
    # Log the request
    linelog-dhcp
    update reply {
        DHCP-DHCP-Server-Identifier = 123.123.123.123
        DHCP-Flags = 0
        }
    perl
    if (ok) {
        if (DHCP-Vendor-Class-Identifier =~ /^MSFT/i) {
            update reply {
                DHCP-Vendor = '0x010400000002'
#                DHCP-MS-WPAD = '0xfc'
            }
        }
        update reply {
            DHCP-Message-Type = DHCP-Offer
        }
    }
    else {
        update reply {
            DHCP-Message-Type = 0
        }
    }
    # Log the response
    linelog-dhcp
    ok
}
dhcp DHCP-Request {
    # Log the request
    linelog-dhcp
    update reply {
        DHCP-DHCP-Server-Identifier = 123.123.123.123
        DHCP-Flags = 0
    }
    perl
    if (ok) {
        if (DHCP-Vendor-Class-Identifier =~ /^MSFT/i) {
            update reply {
                DHCP-Vendor = '0x010400000002'
#                DHCP-MS-WPAD = '0xfc'
            }
        }
        update reply {
            DHCP-Message-Type = DHCP-Ack
        }
    }
    elsif (notfound) {
        update reply {
            DHCP-Message-Type = DHCP-NAK
        }
    }
    elsif (updated) {
        update reply {
            DHCP-Message-Type = DHCP-NAK
        }
    }
    else {
        update reply {
            DHCP-Message-Type = 0
        }
    }
    # Log the response
    linelog-dhcp
    ok
}
dhcp DHCP-Release {
    handled
}
dhcp DHCP-Inform {
    handled
}
dhcp {
    handled
}
post-auth {
}
}

...
 
#listen {
        #  Type of packets to listen for.
        #  Allowed values are:
        #       auth    listen for authentication packets
        #       acct    listen for accounting packets
        #       proxy   IP to use for sending proxied packets
        #       detail  Read from the detail file.  For examples, see
        #               raddb/sites-available/copy-acct-to-home-server
        #       status  listen for Status-Server packets.  For examples,
        #               see raddb/sites-available/status
        #       coa     listen for CoA-Request and Disconnect-Request		
        #               packets.  For examples, see the file
        #               raddb/sites-available/coa-server
        #
#       type = auth
        #  Note: "type = proxy" lets you control the source IP used for
        #        proxying packets, with some limitations:
        #
        #    * A proxy listener CANNOT be used in a virtual server section.
        #    * You should probably set "port = 0".
        #    * Any "clients" configuration will be ignored.
        #
        #  See also proxy.conf, and the "src_ipaddr" configuration entry
        #  in the sample "home_server" section.  When you specify the
        #  source IP address for packets sent to a home server, the
        #  proxy listeners are automatically created.
        #  IP address on which to listen.
        #  Allowed values are:
        #       dotted quad (1.2.3.4)
        #       hostname    (radius.example.com)
        #       wildcard    (*)
#       ipaddr = *
        #  OR, you can use an IPv6 address, but not both
        #  at the same time.
#       ipv6addr = ::   # any.  ::1 == localhost
        #  Port on which to listen.
        #  Allowed values are:
        #       integer port number (1812)
        #       0 means "use /etc/services for the proper port"
#       port = 0
        #  Some systems support binding to an interface, in addition
        #  to the IP address.  This feature isn't strictly necessary,
        #  but for sites with many IP addresses on one interface,
        #  it's useful to say "listen on all addresses for eth0".
        #
        #  If your system does not support this feature, you will
        #  get an error if you try to use it.
        #
#       interface = eth0
        #  Per-socket lists of clients.  This is a very useful feature.
        #
        #  The name here is a reference to a section elsewhere in
        #  radiusd.conf, or clients.conf.  Having the name as
        #  a reference allows multiple sockets to use the same
        #  set of clients.
        #
        #  If this configuration is used, then the global list of clients
        #  is IGNORED for this "listen" section.  Take care configuring
        #  this feature, to ensure you don't accidentally disable a
        #  client you need.
        #
        #  See clients.conf for the configuration of "per_socket_clients".
        #
#       clients = per_socket_clients
#}
#  This second "listen" section is for listening on the accounting
#  port, too.
#
#listen {
#       ipaddr = *
#       ipv6addr = ::
#       port = 0
#       type = acct
#       interface = eth0
#       clients = per_socket_clients
#}
...
 
proxy_requests  = no
#$INCLUDE proxy.conf

...