siteadmin:basic_freeradius_orps_configuration
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| siteadmin:basic_freeradius_orps_configuration [2021/04/28 10:50] – admin | siteadmin:basic_freeradius_orps_configuration [2024/11/21 15:00] (current) – admin | ||
|---|---|---|---|
| Line 6: | Line 6: | ||
| * mods-available -> govroam_logs | * mods-available -> govroam_logs | ||
| - | Delete any other links in the sites-enabled directory (' | + | Delete any other links in the sites-enabled directory (' |
| ===clients.conf: | ===clients.conf: | ||
| < | < | ||
| - | # Configure | + | # Configure a Network Access Server (e.g. wireless controller) to accept traffic |
| client | client | ||
| Line 17: | Line 17: | ||
| ipaddr = 10.10.20.1 | ipaddr = 10.10.20.1 | ||
| } | } | ||
| + | |||
| + | # Configure the JISC NRPS as a client as it will be sending request from your people abroad. | ||
| client roaming0 { | client roaming0 { | ||
| secret = something | secret = something | ||
| ipaddr = 192.168.0.1 | ipaddr = 192.168.0.1 | ||
| + | operator = " | ||
| + | |||
| } | } | ||
| Line 27: | Line 31: | ||
| secret = something | secret = something | ||
| ipaddr = 10.10.10.31 | ipaddr = 10.10.10.31 | ||
| + | operator = " | ||
| } | } | ||
| Line 41: | Line 46: | ||
| # Realms that don't match any other listed send to the pool of govroam servers | # Realms that don't match any other listed send to the pool of govroam servers | ||
| - | realm " | + | realm "~^[^@\. ]([a-zA-Z0-9-]+\.)+[a-zA-Z]{2, |
| auth_pool = govroam | auth_pool = govroam | ||
| nostrip | nostrip | ||
| Line 59: | Line 64: | ||
| secret = something | secret = something | ||
| status_check = status-server # Checks status of govroam server | status_check = status-server # Checks status of govroam server | ||
| + | operator = " | ||
| + | |||
| } | } | ||
| Line 78: | Line 85: | ||
| port = 1812 | port = 1812 | ||
| type = auth | type = auth | ||
| + | operator = " | ||
| + | |||
| } | } | ||
| Line 94: | Line 103: | ||
| authorize { | authorize { | ||
| preprocess | preprocess | ||
| - | update request { | + | update request { |
| - | Operator-Name | + | Operator-Name = 1your.domain # Adds the Operator Name attribute to the request, if it doesn' |
| } | } | ||
| auth_log | auth_log | ||
| Line 118: | Line 127: | ||
| # Lots of logging | # Lots of logging | ||
| reply_log | reply_log | ||
| - | f_ticks | + | |
| + | if ( " | ||
| + | | ||
| + | } | ||
| govroam_log | govroam_log | ||
| Post-Auth-Type REJECT { | Post-Auth-Type REJECT { | ||
| attr_filter.access_reject | attr_filter.access_reject | ||
| reply_log | reply_log | ||
| - | f_ticks | ||
| } | } | ||
| } | } | ||
| Line 146: | Line 157: | ||
| < | < | ||
| - | # F-TICKS | + | # F-TICKS |
| linelog f_ticks { | linelog f_ticks { | ||
| filename = syslog | filename = syslog | ||
| format = "" | format = "" | ||
| reference = " | reference = " | ||
| - | f_ticks { | + | |
| - | Access-Accept =" | + | Access-Accept =" |
| - | Access-Reject | + | |
| - | } | + | |
| - | + | ||
| - | } | + | |
| + | } | ||
| Line 166: | Line 174: | ||
| govroam_log { | govroam_log { | ||
| Access-Accept = " | Access-Accept = " | ||
| - | Access-Reject =" | + | Access-Reject =" |
| - | n}# | + | |
| } | } | ||
| } | } | ||
| Line 173: | Line 180: | ||
| And then create a symlink from mods-enabled/ | And then create a symlink from mods-enabled/ | ||
| + | |||
| + | Use the **details.log** file in mods-available to configure how the local logs are formatted and stored. The format below stores the logs by date and time making it easier to use logrotate or similiar to archive off older logs. | ||
| + | |||
| + | < | ||
| + | detail auth_log { | ||
| + | detailfile = ${radacctdir}/ | ||
| + | header = " | ||
| + | detailperm = 0600 | ||
| + | suppress { | ||
| + | User-Password | ||
| + | } | ||
| + | } | ||
| + | |||
| + | detail reply_log { | ||
| + | detailfile = ${radacctdir}/ | ||
| + | header = " | ||
| + | detailperm = 0600 | ||
| + | } | ||
| + | |||
| + | detail pre_proxy_log { | ||
| + | detailfile = ${radacctdir}/ | ||
| + | header = " | ||
| + | log_packet_header = yes | ||
| + | detailperm = 0600 | ||
| + | suppress { | ||
| + | | ||
| + | } | ||
| + | } | ||
| + | |||
| + | detail post_proxy_log { | ||
| + | detailfile = ${radacctdir}/ | ||
| + | header = " | ||
| + | detailperm = 0600 | ||
| + | } | ||
| + | </ | ||
| + | |||
| + | Once configured you can test using [[public: | ||
siteadmin/basic_freeradius_orps_configuration.1619607010.txt.gz · Last modified: 2021/04/28 10:50 by admin