Mac-auth in the Cloud?

Question

linux

Good afternoon. There is a task to keep records of the issued ip-addresses to user virtual machines. I thought I'd get by with Freeradius, but there's a caveat, we can't use 8021x for a number of reasons. The question is, can freeradius accept a DHCP request from the user, independently accept an argument from the user's mac DHCP request, and then search for it in the database? Thank you.

Answer 1

Whose dhcp server? Maybe with it and pull in a convenient / possible way?

Answer 2

Maybe.
[[email protected] sites-available]# pwd
/etc/raddb/sites-available
[[email protected] sites-available]# ls -la
total 164
drwxr-x--- 2 root radiusd 4096 Feb 24 2019 .
drwxr-xr-x 7 root radiusd 4096 Sep 24 15:15 ..
-rw-r----- 1 root radiusd 4142 Jul 18 2017 buffered-sql
-rw-r----- 1 root radiusd 1103 Jul 18 2017 coa
-rw-r----- 1 root radiusd 2005 Jul 18 2017 control-socket
-rw-r----- 1 root radiusd 5385 Jul 18 2017 copy-acct-to-home-server
-rw-r ----- 1 root radiusd 3551 Jul 18 2017 decoupled-accounting
-rw-r----- 1 root radiusd 18566 Aug 1 2017 default
-rw-r----- 1 root radiusd 19174 Jul 23 2015 default. rpmnew
-rw-r----- 1 root radiusd 7698 Jul 18 2017 dhcp
-rw-r----- 1 root radiusd 1617 Jul 18 2017 dhcp.relay
-rw-r----- 1 root radiusd 7110 Jul 18 2017 dynamic-clients
-rw-r----- 1 root radiusd 3383 Jul 18 2017 example
-rw-r----- 1 root radiusd 12328 Jul 18 2017 inner-tunnel
-rw-r----- README -rw 1 root radiusd 5269 Jul 18 2017 originate-coa
-rw-r----- 1 root radiusd 1025 Jul 18 2017 proxy-inner-tunnel
-rw-r-----
-r----- 1 root radiusd 5100 Jul 18 2017 robust-proxy-accounting
-rw-r----- 1 root radiusd 814 Jul 18 2017 soh
-rw-r----- 1 root radiusd 4077 Feb 24 2019 status
-rw-r----- 1 root radiusd 892 Jul 18 2017 virtual.example.com
-rw-r----- 1 root radiusd 2581 Jul 18 2017 vmps
[[email protected] sites-available]#
See that? There is even an example of a dhcp server)

Answer 3

can freeradius accept a DHCP request from the user, independently accept an argument from the user's mac DHCP request, and then search for it in the database?

Of course not, these are different services and protocols. Operators use IPoE/ISG technology. But dragging this to account for internal users is not at all worth it. This may be useful if you have a commercial cloud. But in this case, this is solved again by other tools.