Биллинговая система Nodeny

allow unknown-clients;
option domain-name-servers 10.10.177.2, 10.10.17.2;

default-lease-time 28800;
min-lease-time 10000;
max-lease-time 128800;

authoritative;

ddns-update-style none;

log-facility local7;

subnet 10.0.0.0 netmask 255.255.255.0 {
    option subnet-mask 255.255.255.0;
    option broadcast-address 10.0.0.255;
#    option routers 10.10.7.250;
#    option interface-mtu 1500;

    {% for user in users %}
        {% eval i = 0 %}
        {% for ip in user.ips %}
            {% if ip.type eq 'dynamic' && user.mac.[i] %}
            host {{user.name}} {
                hardware ethernet {{user.mac.[i]}};
                fixed-address {{ip.ipa}};
            }
            {% eval i = i + 1 %}
          {% endif %}
        {% endfor %}
    {% endfor %}
}

allow unknown-clients;
option domain-name-servers 10.10.177.2, 10.10.17.2;

default-lease-time 28800;
min-lease-time 10000;
max-lease-time 128800;

authoritative;

ddns-update-style none;

log-facility local7;

subnet 10.10.7.0 netmask 255.255.255.0 {
    option subnet-mask 255.255.255.0;
    option broadcast-address 10.10.7.255;
    range 10.10.7.5 10.10.7.240;
    option routers 10.10.7.250;
    option interface-mtu 1500;

    {% for user in users %}
        {% eval i = 0 %}
        {% for ip in user.ips %}
            {% if ip.type eq 'dynamic' && user.mac.[i] %}
            host {{user.name}} {
                hardware ethernet {{user.mac.[i]}};
                fixed-address {{ip.ipa}};
            }
            {% eval i = i + 1 %}
          {% endif %}
        {% endfor %}
    {% endfor %}
}

# Выдадим ip клиенту
        my $rows = sql_do('check_rows', "UPDATE ip_pool SET uid=? WHERE ip=INET_ATON(?) AND type='dynamic'", $p{uid}, $ip);
        $rows < 1 && error("$log В ip_pool нет $ip либо его тип не dynamic");

subnet 10.100.0.0 netmask 255.255.0.0 {
  range 10.100.64.0 10.100.80.255;
  interface em1;
  option routers 10.100.0.1;

set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));

02.03.2013 14:12:17 [commit] ip=10.10.7.20, mac=50:46:5d:66:54:d6, mac_ok=50465d6654d6 | Необходима регистрация мака
02.03.2013 14:14:58 [release] ip=10.10.7.20 | Ok

allow unknown-clients;
authoritative;
ddns-update-style none;
log-facility local7;
option domain-name-servers 10.10.177.2,10.10.17.2;

shared-network 123 {

subnet 10.10.7.0 netmask 255.255.255.0 {
  range 10.10.7.30 10.10.7.100;
  interface vlan7;
  option routers 10.10.7.250;
  default-lease-time 2400;
  max-lease-time 1800;
  on commit {
    set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
    execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit", ClientIP, ClientMac);
  }
  on expiry {
    set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
  }
  on release {
    set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
  }
}

subnet 10.10.60.0 netmask 255.255.255.0 {
  range 10.10.60.10 10.10.60.240;
  interface vlan60;
  option routers 10.10.60.250;
  default-lease-time 2400;
  max-lease-time 1800;
  on commit {
    set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
    execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit", ClientIP, ClientMac);
  }
  on expiry {
    set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
  }
  on release {
    set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
  }
}

subnet 10.10.61.0 netmask 255.255.255.0 {
  range 10.10.61.10 10.10.61.240;
  interface vlan61;
  option routers 10.10.61.250;
  default-lease-time 2400;
  max-lease-time 1800;
  on commit {
    set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
    execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit", ClientIP, ClientMac);
  }
  on expiry {
    set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
  }
  on release {
    set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
    execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
  }
}


}

 ps aux|grep no
ps aux|grep no
root  24578  4.8  6.6 154012 134940   0- S    10:52AM   9:57.27 perl /usr/local/nodeny/noserver.pl -d (perl5.12.4)
root  67309  2.3  0.8 40628 15804   1  S     3:36PM   0:00.24 /usr/bin/perl /usr/local/nodeny/nokernel.pl -m=cap -d (perl5.12.4)
root  24749  0.0  0.5 29084  9384   0- S    10:58AM   0:13.14 /usr/bin/perl /usr/local/nodeny/nokernel.pl -m=dhcp -d (perl5.12.4)

ipfw show | grep fwd
18500     24687      2399147 fwd 127.0.0.1,8080 tcp from any to any dst-port 80

authoritative;
log-facility local7;
ddns-update-style none;
option domain-name-servers 192.168.20.254;
default-lease-time 2400; #потом меняю, допустим на 10800, рестарт дхспд, и абононы работают 42-43мин.
max-lease-time 86400;

default-lease-time 2400;
max-lease-time 1800;

default-lease-time 7200;
max-lease-time 6600;
 и в dhcpd.pm 122*60

Debug->param(
    -type     => 'file',
    -file     => "$dir_nod/logs/dhcp.events.log",
    -nochain  => 1,
    -only_log => 1,
);

ps ax|grep no
  930  v0- S    442:19.10 /usr/bin/perl /usr/local/nodeny/nokernel.pl -d (perl5.12.4)

 5191 v0- S      25:18,49 /usr/bin/perl /usr/local/nodeny/noserver.pl -d (perl5.12.4)
 5192 v0- R     433:37,23 /usr/bin/perl /usr/local/nodeny/nokernel.pl -m=cap -d (perl5.12.4)
 5193 v0- S       0:29,34 /usr/bin/perl /usr/local/nodeny/nokernel.pl -m=dhcp -d (perl5.12.4)

perl nokernel.pl

perl nokernel.pl -L

# dhcpd.conf
#
# Sample configuration file for ISC dhcpd
#

#log-facility local7;
option domain-name-servers 193.106.201.218;

subnet 10.100.0.0 netmask 255.255.255.0 {
    range 10.100.0.2 10.100.0.254;
    interface vlan3;
    option routers 10.100.0.1;
    default-lease-time 2400;
    max-lease-time 1800;
    on commit {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
        set SwitchMac = "";
        set SwitchPort ="";
        if exists agent.circuit-id
        {
            set SwitchMac = binary-to-ascii(16, 8, ":", option agent.remote-id);
            set SwitchPort = binary-to-ascii(10, 8, ":", suffix(option agent.circuit-id, 1));
        }
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit",
                ClientIP, ClientMac, SwitchMac, SwitchPort);
    }
    on expiry {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
    }
    on release {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
    }
}
subnet 172.16.20.0 netmask 255.255.255.0 {
range 172.16.20.2 172.16.20.254;
   option routers 172.16.20.1;
    default-lease-time 2400;
    max-lease-time 1800;
    on commit {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
        set SwitchMac = "";
        set SwitchPort ="";
        if exists agent.circuit-id
        {
            set SwitchMac = binary-to-ascii(16, 8, ":", option agent.remote-id);
            set SwitchPort = binary-to-ascii(10, 8, ":", suffix(option agent.circuit-id, 1));
        }
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit",
                ClientIP, ClientMac, SwitchMac, SwitchPort);
    }
    on expiry {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
    }
    on release {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
    }
}

/ip dhcp-relay
add delay-threshold=none dhcp-server=192.168.110.194 disabled=yes interface=\
    eoip-tunnel1 local-address=172.16.20.1 name=relay1

AND type='static'

AND type='static'

mysql> show create procedure radupdate;
+-----------+----------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------+--------------------+
| Procedure | sql_mode | Create Procedure                                                                                                                                                                                                                                                                                                                                                                    | character_set_client | collation_connection | Database Collation |
+-----------+----------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------+--------------------+
| radupdate |          | CREATE DEFINER=`root`@`localhost` PROCEDURE `radupdate`(IN login VARCHAR(64), IN ip VARCHAR(16), IN properties VARCHAR(255))
BEGIN
  DECLARE usr_id INT;
  DECLARE usr_ip VARCHAR(15) DEFAULT NULL;
  SELECT id INTO usr_id FROM users WHERE name=login LIMIT 1;
  SELECT get_ip(usr_id) INTO usr_ip;
  CALL set_auth(usr_ip, CONCAT('mod=pppoe;',REPLACE(properties,':','')));
END | latin1               | latin1_swedish_ci    | latin1_swedish_ci  |
+-----------+----------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------+--------------------+
1 row in set (0.06 sec)

mysql>

mysql> SELECT CONCAT('mod=pppoe;',REPLACE('11:22:33:44:55:66',':',''));
+----------------------------------------------------------+
| CONCAT('mod=pppoe;',REPLACE('11:22:33:44:55:66',':','')) |
+----------------------------------------------------------+
| mod=pppoe;112233445566                                   |
+----------------------------------------------------------+
1 row in set (0.00 sec)

mysql>

{% if ip.ip >= inet.aton('10.0.0.0') && ip.ip <= inet.aton('10.255.255.255') %}
           ...
        {% endif %}

{% for user in users %}
      {% for ip in user.ips %}
            {% eval i = 0 %}
            {% if ip.type eq 'static' && user.mac.[ i] && ip.ip >= inet.aton('172.20.124.0') && ip.ip <= inet.aton('172.20.124.255') %}
                 host {{ip.ipa}} { hardware ethernet {{user.mac.[ i]|pretty_mac}}; fixed-address {{ip.ipa}}; }
            {% eval i = i + 1 %}
           {% endif %}
       {% endfor %}
 {% endfor %}

/var/log/dhcpd.log
Apr 11 11:11:39 DHCP dhcpd: DHCPDISCOVER from 04:7d:7b:c3:22:06 via em1
Apr 11 11:11:40 DHCP dhcpd: DHCPOFFER on 10.100.0.2 to 04:7d:7b:c3:22:06 (microsof-9e6093) via em1
Apr 11 11:11:40 DHCP dhcpd: execute_statement argv[0] = /usr/bin/perl
Apr 11 11:11:40 DHCP dhcpd: execute_statement argv[1] = /usr/local/nodeny/modules/dhcp/events.pl
Apr 11 11:11:40 DHCP dhcpd: execute_statement argv[2] = commit
Apr 11 11:11:40 DHCP dhcpd: execute_statement argv[3] = 10.100.0.2
Apr 11 11:11:40 DHCP dhcpd: execute_statement argv[4] = 4:7d:7b:c3:22:6
Apr 11 11:11:40 DHCP dhcpd: execute_statement argv[5] =
Apr 11 11:11:40 DHCP dhcpd: execute_statement argv[6] =
Apr 11 11:11:41 DHCP dhcpd: DHCPREQUEST for 10.100.0.2 (10.100.0.1) from 04:7d:7b:c3:22:06 (microsof-9e6093) via em1
Apr 11 11:11:41 DHCP dhcpd: DHCPACK on 10.100.0.2 to 04:7d:7b:c3:22:06 (microsof-9e6093) via em1

/usr/local/nodeny/logs/dhcp.events.log
11.04.2014 11:11:41 [commit] ip=10.100.0.2, mac=4:7d:7b:c3:22:6, mac_ok=047d7bc32206 | Необходима регистрация мака
11.04.2014 11:26:40 [commit] ip=10.100.0.2, mac=4:7d:7b:c3:22:6, mac_ok=047d7bc32206 | Ok

#Конфіг свіча
show startup-config
ip dhcp snooping
ip dhcp snooping vlan 1
ip dhcp relay address 10.100.0.1
ip dhcp relay enable
ip dhcp information option
....
interface fastethernet24
 ip dhcp snooping trust

/usr/local/nodeny/logs/dhcp.events.log
11.04.2014 11:48:46 ERROR: [commit] ip=10.100.0.7, mac=12:32:1e:43:de:12, mac_ok=12321e43de12, port=00065ca48a6d9703[8] | select uid from mac_uid error

mysql> show create table mac_uid;
+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Table   | Create Table                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| mac_uid | CREATE TABLE `mac_uid` (
  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  `mac` varchar(12) DEFAULT NULL,
  `ip` int(10) unsigned NOT NULL,
  `uid` bigint(20) unsigned NOT NULL,
  `time` int(10) unsigned NOT NULL,
  `device_mac` varchar(12) NOT NULL,
  `device_port` smallint(6) NOT NULL,
  `oneconnect` tinyint(4) NOT NULL DEFAULT '0',
  PRIMARY KEY (`id`),
  UNIQUE KEY `mac` (`mac`),
  KEY `uid` (`uid`),
  KEY `time` (`time`),
  KEY `ip` (`ip`)
) ENGINE=InnoDB AUTO_INCREMENT=89 DEFAULT CHARSET=utf8 |
+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
1 row in set (0.00 sec)

mysql> SELECT *, INET_NTOA(ip) FROM mac_uid;
+----+--------------+-----------+-----+------------+---------------+-------------+------------+---------------+
| id | mac                | ip            | uid   | time          | device_mac     | device_port  | oneconnect | INET_NTOA(ip) |
+----+--------------+-----------+-----+------------+---------------+-------------+------------+---------------+
| 86 | 047d7bc32206 |         0     |  10  | 1397204800 |                     |                0 |               0 |    0.0.0.0       |
| 88 | 12321e43de12 | 174325767|   0   | 1397206126 | 00065ca48a6d |                8 |               0 |   10.100.0.7    |
+----+--------------+-----------+-----+------------+--------------+--------------+-------------+---------------+
2 rows in set (0.00 sec)

mysql> SELECT *, INET_NTOA(ip) FROM mac_uid;
+----+--------------+-----------+-----+------------+--------------+-------------+------------+---------------+
| id | mac          | ip        | uid | time       | device_mac   | device_port | oneconnect | INET_NTOA(ip) |
+----+--------------+-----------+-----+------------+--------------+-------------+------------+---------------+
| 86 | 047d7bc32206 |         0 |   0 | 1397204800 |              |           0 |          0 | 0.0.0.0       |
| 88 | NULL         | 174325767 |   0 | 1397206126 | 00065ca48a6d |           8 |          0 | 10.100.0.7    |
| 89 | 12321e43de12 | 174325767 |  10 | 1397207026 | 00065ca48a6d |           8 |          0 | 10.100.0.7    |
+----+--------------+-----------+-----+------------+--------------+-------------+------------+---------------+
3 rows in set (0.00 sec)

mysql> SELECT *, INET_NTOA(ip) FROM mac_uid;
+----+--------------+-----------+-----+------------+--------------+-------------+------------+---------------+
| id | mac          | ip        | uid | time       | device_mac   | device_port | oneconnect | INET_NTOA(ip) |
+----+--------------+-----------+-----+------------+--------------+-------------+------------+---------------+
| 86 | 047d7bc32206 |         0 |   0 | 1397204800 |              |           0 |          0 | 0.0.0.0       |
| 89 | 12321e43de12 | 174325767 |  10 | 1397207026 | 00065ca48a6d |           8 |          2 | 10.100.0.7    |
+----+--------------+-----------+-----+------------+--------------+-------------+------------+---------------+
2 rows in set (0.00 sec)

allow unknown-clients;
option domain-name-servers 1.1.1.1, 8.8.8.8;

default-lease-time 1800;
max-lease-time 1400;

authoritative;

ddns-update-style interim;

log-facility local7;



shared-network real_ip {
    subnet 192.168.100.0 netmask 255.255.255.128 {
        interface vlan100;
        option routers 192.168.100.1;
        option subnet-mask 255.255.255.127;
        range 192.168.100.2 192.168.100.126;
        allow unknown-clients;

        on commit {
               set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
                      set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
                      set SwitchMac = "";
                      set SwitchPort ="";
                      if exists agent.circuit-id
                      {
                          set SwitchMac = binary-to-ascii(16, 8, ":", option agent.remote-id);
                          set SwitchPort = binary-to-ascii(10, 8, ":", suffix(option agent.circuit-id, 1));
                      }
                      execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit",
                              ClientIP, ClientMac, SwitchMac, SwitchPort);
            }
            on expiry {
              set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
              execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
            }
            on release {
              set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
              execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
            }
    }
    subnet xxx.yyy.zzz.0 netmask 255.255.255.128 {
        option subnet-mask 255.255.255.128;
        option broadcast-address xxx.yyy.zzz.127;
        option routers xxx.yyy.zzz.125;
        deny unknown-clients;
        on commit {
               set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
                      set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
                      set SwitchMac = "";
                      set SwitchPort ="";
                      if exists agent.circuit-id
                      {
                          set SwitchMac = binary-to-ascii(16, 8, ":", option agent.remote-id);
                          set SwitchPort = binary-to-ascii(10, 8, ":", suffix(option agent.circuit-id, 1));
                      }
                      execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit",
                              ClientIP, ClientMac, SwitchMac, SwitchPort);
            }
            on expiry {
              set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
              execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
            }
            on release {
              set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
              execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
            }
    }
}
{% for user in users %}
    {% eval i = 0 %}
    {% for ip in user.ips %}
        {% if ip.type eq 'static' && user.mac.[i] %}
        host host{{ip.ipa}} {
                hardware ethernet {{user.mac.[i]|pretty_mac}};
                fixed-address {{ip.ipa}};
        }
        {% eval i = i + 1 %}
        {% endif %}
    {% endfor %}
{% endfor %}

set SwitchMac = binary-to-ascii(16, 8, ":", option agent.remote-id);

set SwitchMac = binary-to-ascii(16, 8, ":", suffix(option agent.remote-id, 6)) 

Строк: 0. Время выполнения sql: 0.0005 сек
03.11.2014 20:51:12 ERROR: [commit] ip=1.1.1.0, mac=0:1f:16:4c:84:fb, mac_ok=001f164c84fb | В ip_pool нет 1.1.1.0 либо его тип не dynamic

subnet 10.10.200.0 netmask 255.255.255.0 {
  range 10.10.200.10 10.10.200.240;
  interface vlan200;
  option routers 10.10.200.250;
}

ip=10.100.7.169, mac=14:da:e9:9a:dd:1a, mac_ok=14dae99add1a | Ok

ip=10.100.7.169, mac=14:da:e9:9a:dd:1a, mac_ok=14dae99add1a port=7062b84313c0[26]| Необходима регистрация мака

1491 ??  Ss        7:01,71 /usr/sbin/syslogd -l /var/run/log -l /var/named/var/run/log -s
 1705 ??  Is        0:00,04 /bin/sh /usr/local/bin/mysqld_safe --defaults-extra-file=/var/db/mysql/my.cnf --user=mysql --datadir=/var/db/mysql --pid-file=/var/db/mysql
 2009 ??  S      9169:22,41 /usr/local/libexec/mysqld --defaults-extra-file=/var/db/mysql/my.cnf --basedir=/usr/local --datadir=/var/db/mysql --plugin-dir=/usr/local/l
 2020 ??  R<s   12908:41,11 /usr/local/bin/ipcad -rds -c /usr/local/etc/ipcad.conf
 2026 ??  Is        0:00,02 /usr/sbin/sshd
 2031 ??  Ss      151:37,90 /usr/local/sbin/radiusd
 2032 ??  Ss        1:36,90 /usr/local/sbin/httpd -DNOHTTPACCEPT
 2041 ??  Ss        0:40,12 sendmail: accepting connections (sendmail)
 2044 ??  Is        0:00,62 sendmail: Queue runner@00:30:00 for /var/spool/clientmqueue (sendmail)
 2048 ??  Ss        0:07,70 /usr/sbin/cron -s
 2182 ??  Ss       34:09,08 /usr/local/sbin/dhcpd -cf /usr/local/etc/dhcpd.conf -lf /var/db/dhcpd/dhcpd.leases -pf /var/run/dhcpd/dhcpd.pid -user root -group dhcpd
 8256 ??  Ss      190:09,81 /usr/sbin/named -t /var/named -u bind
 2326 v0- S       207:17,15 /usr/bin/perl /usr/local/nodeny/nokernel.pl -d (perl5.14.4)
 2329 v0- S      2809:41,00 /usr/bin/perl /usr/local/nodeny/noserver.pl -d (perl5.14.4)
 2422 v0- S       518:59,36 /usr/bin/perl /usr/local/nodeny/nokernel.pl -m=pingserver -d (perl5.14.4)
 2429 v0- R      3895:53,90 /usr/bin/perl /usr/local/nodeny/nokernel.pl -m=cap -d (perl5.14.4)
 2438 v0- S       483:23,73 /usr/bin/perl /usr/local/nodeny/nokernel.pl -m=collectors -d (perl5.14.4)

log-facility local7;
option domain-name-servers 10.100.0.1;

subnet 10.100.0.0 netmask 255.255.0.0 {
    range 10.100.0.2 10.100.16.255;
    interface em1;
    option routers 10.100.0.1;
    default-lease-time 2400;
    max-lease-time 1800;
    on commit {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
        set SwitchMac = "";
        set SwitchPort = "";
        if exists agent.circuit-id
        {
            set SwitchMac = binary-to-ascii(16, 8, ":", suffix(option agent.remote-id,6));
            set SwitchPort = binary-to-ascii(10, 8, ":", suffix(option agent.circuit-id, 1));
        }
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit",
                ClientIP, ClientMac, SwitchMac, SwitchPort);
    }
    on expiry {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
    }
    on release {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
    }
}

 2862 ??  Ss      0:13.16 /usr/sbin/syslogd -l /var/run/log -l /var/named/var/run/log -s
 2948 ??  Ss     10:32.71 /usr/sbin/named -t /var/named -u bind
 2989 ??  Is     12:39.88 /usr/local/sbin/mpd5 -p /var/run/mpd5.pid -b
 3030 ??  DL      0:58.42 [ng_queue]
 3041 ??  Is      0:00.01 /bin/sh /usr/local/bin/mysqld_safe --defaults-extra-file=/var/db/mysql/my.cnf --user=mysql --datadir=/var/db/mysql --pid-file=/var
 3187 ??  I       0:34.78 /usr/local/libexec/mysqld --defaults-extra-file=/var/db/mysql/my.cnf --basedir=/usr/local --datadir=/var/db/mysql --log-error=/var
 3189 ??  Is      0:00.00 /usr/local/sbin/radiusd
 4104 ??  S<s    12:29.85 /usr/local/bin/ipcad -rds -c /usr/local/etc/ipcad.conf
2997 v0- R      73:01.31 /usr/bin/perl /usr/local/nodeny/noserver.pl -d (perl5.14.4)
 2998 v0- S       5:14.99 /usr/bin/perl /usr/local/nodeny/nokernel.pl -d (perl5.14.4)

startup:
        set user ***** *****
        set console self 127.0.0.1 5005
        set console open
        set web self 0.0.0.0 5006
        set web open

default:
        load pppoe_server

pppoe_server:

        create bundle template B
        set ipcp ranges *.*.*.*/32 127.0.0.2/32
        set ipcp dns *.*.*.* *.*.*.*
        set ccp yes mppc
        set mppc yes e40
        set mppc yes e56
        set mppc yes e128
        set mppc yes stateless
        set ecp disable dese-bis dese-old

        create link template common pppoe
        set link enable multilink
        set link action bundle B
        set link disable chap pap eap
        set link enable pap
        load radius
        set pppoe service "*"

        create link template igb0 common
        set link max-children 1000
        set pppoe iface igb0
        set link enable incoming

radius:
        set radius server *.*.*.* ******* 1812 1813
        set radius retries 3
        set radius timeout 3
        set radius me 127.0.0.1
        set auth acct-update 45
        set auth enable radius-auth
        set auth enable radius-acct
        set radius enable message-authentic

10.100.0.8/32 27981

authorize_reply_query = "call radreply('%{User-Name}')"

authorize_check_query = "SELECT NULL,'%{User-Name}','Auth-Type','Accept','='"

authorize_check_query = "call radcheck('%{User-Name}')"
authorize_check_query = "SELECT NULL,'%{User-Name}','Auth-Type','Accept','='"

     else
    {
        # Мак не привязан ни к какому клиенту
        sql_do(0, "UPDATE ip_pool SET uid=0 WHERE ip=INET_ATON(?) AND type='dynamic'", $ip);
        tolog "$log Необходима регистрация мака";
        МОЯ КОМАНДА
        exit;
    }

   if( $rows<1 )
    {
        # Создаем/апдейтим связку mac = device_mac / device_port / ip
        my $rows = sql_do( 'check_rows',
            'INSERT INTO mac_uid SET uid=0, mac=?, '.
                'device_mac=?, device_port=?, ip=INET_ATON(?), time=UNIX_TIMESTAMP()'.
            ' ON DUPLICATE KEY UPDATE '.
                'device_mac=?, device_port=?, ip=INET_ATON(?), time=UNIX_TIMESTAMP()',
                $mac_ok, $device_mac, $device_port, $ip,
                $device_mac, $device_port, $ip
        );
        $rows<1 && error("$log sql error");
        МОЯ КОМАНДА
    }

 if( $info->{cstate} == 1 && scalar @cfg::request_info_from_usr )

 if( $info->{cstate} == 1 && scalar @cfg::request_info_from_usr && $cmd ne 'u_dhcp' )

UPDATE mac_uid SET device_port = "1", oneconnect = "0" WHERE data0.uid = mac_uid.uid AND data0._adr_type = 2;

UPDATE mac_uid JOIN data0 ON data0.uid = mac_uid.uid SET device_port = "1", oneconnect = "0" WHERE data0._adr_type = 2;

10.11.2017 19:04:00 Duplicate entry 'e894f6b07995' for key 'mac'

{
  'sql' => 'UPDATE mac_uid SET time=UNIX_TIMESTAMP(), ip=INET_ATON(?), mac=? WHERE device_mac=? AND device_port=? AND oneconnect>0',
  'param' => [
    '10.194.132.19',
    'e894f6b07995',
    'e067b31533b2',
    1
  ]
};

 UPDATE mac_uid SET time=UNIX_TIMESTAMP(), ip=INET_ATON('10.194.132.19'), mac='e894f6b07995' WHERE device_mac='e067b31533b2' AND device_port='1' AND oneconnect>0
10.11.2017 19:04:00 Connecting to DBI:mysql:database=nodeny;host=localhost;port=3306;mysql_connect_timeout=5 : 0.000274 sec
10.11.2017 19:04:00 INSERT INTO mac_uid SET uid=0, mac='e894f6b07995', device_mac='e067b31533b2', device_port='1', ip=INET_ATON('10.194.132.19'), time=UNIX_TIMESTAMP() ON DUPLICATE KEY UPDATE device_mac='e067b31533b2', device_port='1', ip=INET_ATON('10.194.132.19'), time=UNIX_TIMESTAMP()
Строк: 1. Время выполнения sql: 0.0003 сек
10.11.2017 19:04:00 SELECT uid FROM mac_uid WHERE mac='e894f6b07995' AND device_mac='e067b31533b2' AND device_port='1'
Строк: 1. Время выполнения sql: 0.0001 сек
10.11.2017 19:04:00 UPDATE ip_pool SET uid=0 WHERE ip=INET_ATON('10.194.132.19') AND type='dynamic'
Строк: 1. Время выполнения sql: 0.0002 сек

10.11.2017 19:04:00 [commit] ip=10.194.132.19, mac=e8:94:f6:b0:79:95, mac_ok=e894f6b07995, port=e067b31533b2[1] | Необходима регистрация мака

log-facility local7;
option domain-name-servers 1.1.1.1;
authoritative;
allow unknown-clients;

.........................  

shared-network vlan501 {


{% for user in users %}
  {% if user.ips.0.ipa && user.ips.0.type eq 'static' && user.connection.0 && user.connection.0.oneconnect && user.ips.0.ip >= inet.aton('10.1.1.1') && user.ips.0.ip <=
    {% one_line %}
class "host{{user.ips.0.ipa}}" { match if binary-to-ascii(10,8,"",suffix(option agent.circuit-id,2))="{{user.connection.0.device_port}}"
    and suffix(option agent.remote-id,6)={{user.connection.0.device_mac|pretty_mac}}; }
    {% one_line_end %}
  {% endif %}
{% endfor %}

subnet 10.1.1.0 netmask 255.255.255.0 {
  pool {
 {% for user in users %}
  {% if user.ips.0.ipa && user.ips.0.type eq 'static' && user.connection.0 && user.connection.0.oneconnect && user.ips.0.ip >= inet.aton('10.1.1.1') && user.ips.0.ip <=
    {% one_line %}
    deny members of  "host{{user.ips.0.ipa}}";
    {% one_line_end %}
  {% endif %}
{% endfor %}
    range 10.1.1.65 10.1.1.250;
}
    interface vlan501;
    option routers 10.1.1.254;
    default-lease-time 28800;
    min-lease-time 10000;
    max-lease-time 128800;
   on commit {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
        set SwitchMac = "";
        set SwitchPort ="";
        if exists agent.circuit-id
        {
            set SwitchMac = binary-to-ascii(16, 8, ":", suffix(option agent.remote-id, 6));
            set SwitchPort = binary-to-ascii(10, 8, "", suffix(option agent.circuit-id, 2));
        }
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit",
                ClientIP, ClientMac, SwitchMac, SwitchPort);
    }
    on expiry {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
    }
    on release {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
    }

{% for user in users %}
  {% if user.ips.0.ipa && user.ips.0.type eq 'static' && user.connection.0 && user.ips.0.ip >= inet.aton('10.1.1.1') && user.ips.0.ip <= inet.aton('10.1.1.64') %}
    {% if user.connection.0.oneconnect %}
        pool { range {{user.ips.0.ipa}}; allow members of "host{{user.ips.0.ipa}}"; }
    {% else %}
        host host{{user.ips.0.ipa}} { hardware ethernet {{user.connection.0.mac|pretty_mac}}; fixed-address {{user.ips.0.ipa}}; }
    {% endif %}
  {% endif %}
{% endfor %}

}
}
.........................

SELECT * FROM `data0`

diff -Naur dhcp-4.2.6.orig/common/bpf.c dhcp-4.2.6/common/bpf.c
--- dhcp-4.2.6.orig/common/bpf.c	2014-02-01 01:35:09.000000000 +0600
+++ dhcp-4.2.6/common/bpf.c	2014-07-09 23:56:26.603356968 +0600
@@ -575,6 +575,7 @@
 	 */
         switch (sa->sdl_type) {
                 case IFT_ETHER:
+                case IFT_L2VLAN:
                         hw->hlen = sa->sdl_alen + 1;
                         hw->hbuf[0] = HTYPE_ETHER;
                         memcpy(&hw->hbuf[1], LLADDR(sa), sa->sdl_alen);
diff -Naur dhcp-4.2.6.orig/server/dhcp.c dhcp-4.2.6/server/dhcp.c
--- dhcp-4.2.6.orig/server/dhcp.c	2014-02-01 01:35:09.000000000 +0600
+++ dhcp-4.2.6/server/dhcp.c	2014-07-09 23:56:31.427356932 +0600
@@ -31,6 +31,8 @@
 #include <limits.h>
 #include <sys/time.h>
 
+extern int flag_dd_option;
+
 static void commit_leases_ackout(void *foo);
 static void maybe_return_agent_options(struct packet *packet,
 				       struct option_state *options);
@@ -4181,8 +4183,12 @@
 		{
 			if (pool -> free)
 				candl = pool -> free;
-			else
+			else if (pool -> abandoned)
 				candl = pool -> abandoned;
+			else if (flag_dd_option) {
+				candl = pool -> active;
+				candl -> ends = cur_time;
+			}
 		}
 
 		/*
diff -Naur dhcp-4.2.6.orig/server/dhcpd.c dhcp-4.2.6/server/dhcpd.c
--- dhcp-4.2.6.orig/server/dhcpd.c	2014-02-01 01:35:09.000000000 +0600
+++ dhcp-4.2.6/server/dhcpd.c	2014-07-10 00:00:42.159355085 +0600
@@ -42,6 +42,8 @@
 #include <sys/types.h>
 #include <sys/time.h>
 
+int flag_dd_option = 0;
+
 #if defined (PARANOIA)
 #  include <sys/types.h>
 #  include <unistd.h>
@@ -334,6 +336,8 @@
 				usage ();
 			set_chroot = argv [i];
 #endif /* PARANOIA */
+		} else if (!strcmp (argv [i], "-dd")) {
+		  flag_dd_option = 1;
 		} else if (!strcmp (argv [i], "-cf")) {
 			if (++i == argc)
 				usage ();
@@ -1225,7 +1229,7 @@
 		  "             [-tf trace-output-file]\n"
 		  "             [-play trace-input-file]\n"
 #endif /* TRACING */
-		  "             [-pf pid-file] [--no-pid] [-s server]\n"
+		  "             [-pf pid-file] [--no-pid] [-s server] [-dd]\n"
 		  "             [if0 [...ifN]]");
 }
 #endif

class "ZTEGC108F8AC" { match if substring(option agent.remote-id, 0, 14)="ZTEGC108F8AC";}
class "a0c6.ec06.8309" { match if substring(option agent.remote-id, 0, 14)="a0c6.ec06.8309";}

 Db->do("ALTER TABLE mac_uid ADD comment VARCHAR(256) DEFAULT NULL AFTER oneconnect");

interface gpon-onu_1/2/1:4
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 2355 vlan 2355
  port-location format flexible-syntax vport 1
  port-location sub-option remote-id enable vport 1
  port-location sub-option remote-id name [b]NGPN100008AC[/b] vport 1
  dhcp-option82 enable vport 1
  dhcp-option82 trust true replace vport 1
  ip dhcp snooping enable vport 1
  ip access-group 300 in vport 1
!

DROP PROCEDURE IF EXISTS `radreply`;
DELIMITER $$
CREATE PROCEDURE `radreply`(IN login VARCHAR(64))
BEGIN
    DECLARE usr_mac VARCHAR(12);
    DECLARE usr_ip VARCHAR(15);
    DECLARE usr_id INT;
    SELECT REPLACE(login, ':', '') INTO usr_mac;
    SELECT uid INTO usr_id FROM mac_uid WHERE mac=usr_mac;
    IF usr_id IS NOT NULL AND usr_id>0 THEN
        SELECT INET_NTOA(m.ip) INTO usr_ip FROM mac_uid m JOIN ip_pool i ON m.ip=i.ip AND m.uid=i.uid
            WHERE i.type='static' AND m.mac=usr_mac;
        IF usr_ip IS NULL THEN
            SELECT get_ip(usr_id) INTO usr_ip;
            UPDATE mac_uid SET ip=INET_ATON(usr_ip), time=UNIX_TIMESTAMP() WHERE uid=usr_id;
        END IF;
        UPDATE mac_uid SET ip=0 WHERE ip=INET_ATON(usr_ip) AND uid<>usr_id;
    ELSE
        START TRANSACTION;
        SELECT INET_NTOA(ip) INTO usr_ip FROM ip_pool
            WHERE uid=0 AND type='dynamic' AND `release` < UNIX_TIMESTAMP()
            ORDER BY RAND() LIMIT 1 FOR UPDATE;
        INSERT INTO mac_uid VALUES(
            NULL, usr_mac, INET_ATON(usr_ip), 0, UNIX_TIMESTAMP(), 0, 0, 0, '')
        ON DUPLICATE KEY
            UPDATE ip=IF(ip>0,ip,INET_ATON(usr_ip)), time=UNIX_TIMESTAMP();
        COMMIT;
        SELECT INET_NTOA(ip) INTO usr_ip FROM mac_uid WHERE mac=usr_mac;
        UPDATE ip_pool SET `release` = UNIX_TIMESTAMP() + 3600
            WHERE ip = INET_ATON(usr_ip);
    END IF;
    SELECT NULL, login, 'Framed-IP-Address', usr_ip, '=';
    SELECT NULL, login, 'Session-Timeout', '600', '=';
END$$
DELIMITER ;

SELECT INET_NTOA(m.ip) INTO usr_ip FROM mac_uid m JOIN ip_pool i ON m.ip=i.ip AND m.uid=i.uid
            WHERE i.type='static' AND m.mac=usr_mac;
        IF usr_ip IS NULL THEN
            SELECT get_ip(usr_id) INTO usr_ip;
            UPDATE mac_uid SET ip=INET_ATON(usr_ip), time=UNIX_TIMESTAMP() WHERE uid=usr_id;
        END IF;

perl install.pl -w=www

# Включение проверки пингованием по arp - позволяет раньше выявить когда клиент
# отключился, а не пока закончится время аренды ip
# Необходим модуль Net::ARP (/usr/ports/net/p5-Net-ARP)

DROP PROCEDURE IF EXISTS `radcheck`;
DELIMITER $$
CREATE PROCEDURE `radcheck` (IN login VARCHAR(64))
BEGIN
  SELECT u.id, u.name, 'Password' AS Attribute, AES_DECRYPT(u.passwd,'hardpass') AS Value,'=='
    FROM users u JOIN data0 d ON u.id = d.uid WHERE u.name=login AND d._allow_pppoe > 0;
END$$
DELIMITER ;

call radcheck_test('petrov');