Ok maybe I'm a dunce, but i can't figure this out for the life of me, can't get much easier of a config but its just not working!
Concerned config at bottom of this post, the radius is responding correctly
i've tried sending framed-route as ....
0.0.0.0 0.0.0.0 192.168.0.1
0.0.0.0/24 192.168.0.1
0.0.0.0 0.0.0.0 192.168.0.1 1
0.0.0.0/24 192.168.0.1 1
0.0.0.0 192.168.0.1
One of 3 things happen...
1. Route not parseable in the radius/dhcp debug
2. Route not sent in the DHCP ACK, client gets IP but no gateway
3. Route with for example that first one, it gets sent as the default gateway BUT for some reason a classless route (opt 121) also gets sent with a bad network (192.192.0.1) which is no where in my config or radius. So the example thats shown online on how to send the route works, but when i use it it adds this classless route to the dhcp ack, and because of that the windows client discards the dhcp ack and the client gets no ip at all
Where am i going wrong? This should be simple
Radius Sends
*Aug 8 06:40:48.023: RADIUS: Service-Type [6] 6 Framed [2]
*Aug 8 06:40:48.023: RADIUS: Framed-Route [22] 29 "0.0.0.0/24 192.168.0.1 1"
*Aug 8 06:40:48.023: RADIUS: Vendor, Cisco [26] 29
*Aug 8 06:40:48.023: RADIUS: Cisco AVpair [1] 23 "session-duration=7200"
*Aug 8 06:40:48.023: RADIUS: Session-Timeout [27] 6 3600
*Aug 8 06:40:48.023: RADIUS: Framed-IP-Netmask [9] 6 255.255.255.0
*Aug 8 06:40:48.023: RADIUS: Framed-IP-Address [8] 6 192.168.0.3
Cisco 7301 v15.2
aaa new-model
aaa group server radius ISG_TEST
server 192.168.150.235 auth-port 1812 acct-port 1813
aaa authorization network auth1 group ISG_TEST
aaa accounting network acct1 start-stop group ISG_TEST
ip dhcp pool pool_common
accounting acct1
authorization method auth1
authorization shared-password password
authorization username %c