siteadmin:basic_freeradius_orps_configuration
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| siteadmin:basic_freeradius_orps_configuration [2022/08/04 14:17] – admin | siteadmin:basic_freeradius_orps_configuration [2024/11/21 15:00] (current) – admin | ||
|---|---|---|---|
| Line 6: | Line 6: | ||
| * mods-available -> govroam_logs | * mods-available -> govroam_logs | ||
| - | Delete any other links in the sites-enabled directory (' | + | Delete any other links in the sites-enabled directory (' |
| ===clients.conf: | ===clients.conf: | ||
| < | < | ||
| - | # Configure | + | # Configure a Network Access Server (e.g. wireless controller) to accept traffic |
| client | client | ||
| Line 17: | Line 17: | ||
| ipaddr = 10.10.20.1 | ipaddr = 10.10.20.1 | ||
| } | } | ||
| + | |||
| + | # Configure the JISC NRPS as a client as it will be sending request from your people abroad. | ||
| client roaming0 { | client roaming0 { | ||
| secret = something | secret = something | ||
| ipaddr = 192.168.0.1 | ipaddr = 192.168.0.1 | ||
| + | operator = " | ||
| + | |||
| } | } | ||
| Line 27: | Line 31: | ||
| secret = something | secret = something | ||
| ipaddr = 10.10.10.31 | ipaddr = 10.10.10.31 | ||
| + | operator = " | ||
| } | } | ||
| Line 41: | Line 46: | ||
| # Realms that don't match any other listed send to the pool of govroam servers | # Realms that don't match any other listed send to the pool of govroam servers | ||
| - | realm " | + | realm "~^[^@\. ]([a-zA-Z0-9-]+\.)+[a-zA-Z]{2, |
| auth_pool = govroam | auth_pool = govroam | ||
| nostrip | nostrip | ||
| Line 59: | Line 64: | ||
| secret = something | secret = something | ||
| status_check = status-server # Checks status of govroam server | status_check = status-server # Checks status of govroam server | ||
| + | operator = " | ||
| + | |||
| } | } | ||
| Line 78: | Line 85: | ||
| port = 1812 | port = 1812 | ||
| type = auth | type = auth | ||
| + | operator = " | ||
| + | |||
| } | } | ||
| Line 94: | Line 103: | ||
| authorize { | authorize { | ||
| preprocess | preprocess | ||
| - | update request { | + | update request { |
| - | Operator-Name | + | Operator-Name = 1your.domain # Adds the Operator Name attribute to the request, if it doesn' |
| } | } | ||
| auth_log | auth_log | ||
| Line 118: | Line 127: | ||
| # Lots of logging | # Lots of logging | ||
| reply_log | reply_log | ||
| - | f_ticks | + | |
| + | if ( " | ||
| + | | ||
| + | } | ||
| govroam_log | govroam_log | ||
| Post-Auth-Type REJECT { | Post-Auth-Type REJECT { | ||
| attr_filter.access_reject | attr_filter.access_reject | ||
| reply_log | reply_log | ||
| - | f_ticks | ||
| } | } | ||
| } | } | ||
| Line 146: | Line 157: | ||
| < | < | ||
| - | # F-TICKS | + | # F-TICKS |
| linelog f_ticks { | linelog f_ticks { | ||
| filename = syslog | filename = syslog | ||
| format = "" | format = "" | ||
| reference = " | reference = " | ||
| - | f_ticks { | + | |
| - | Access-Accept =" | + | Access-Accept =" |
| - | + | ||
| - | } | + | |
| + | } | ||
| Line 206: | Line 216: | ||
| </ | </ | ||
| + | Once configured you can test using [[public: | ||
siteadmin/basic_freeradius_orps_configuration.1659622647.txt.gz · Last modified: 2022/08/04 14:17 by admin