+7 (916) 741 5495
support@netams.com

                         english   

 

RADIUS


RADIUS NeTAMS 3.3.0 (CURRENT) 2378 (8 2005.)

NeTAMS - -, netams Telnet API. RADIUS- -. , NeTAMS -. (PAP/CHAP/MS-CHAP/EAP), .. FreeRADIUS NETAMS; .
( ) - storage... type radius ().
3.4.0 - NAS, data-source raw.

NeTAMS - (.. -; ).

:
  1. telnet- /
  2. rlm_netams, FreeRADIUS
  3. HTML- mod_auth_radius+ html ()
, , pppoe+ppp (FreeBSD 5.3) Windows 2003 RRAS. , NeTAMS dialup- pppoe- , // .

:
  1. (/) -.
  2. - rlm_netams, , , NeTAMS Telnet API.
  3. NeTAMS . , rlm_netams (.. -) , IP- . "Caller-ID" ( PPPoE - ), "mac ...", .
  4. rlm_netams , RADIUS- .
  5. , .
-:
  1. HTML HTML- , . .htaccess "" URI, .htpasswd - apache RADIUS-.
  2. HTTP- () .htaccess . ( 401)
  3. Apache mod_auth_radius, - . -.
  4. - rlm_netams, - , , NeTAMS Telnet API.
  5. NeTAMS , . RADIUS-.
  6. rlm_netams , RADIUS- Apache.
  7. Apache () , .

accounting (Start, Stop, Alive) -:
  1. - rlm_netams, , , NeTAMS Telnet API.
  2. Start In Out, as-is, user Framed-IP-Address, IP- .
  3. Stop In Out, incremental, user IP- .
  4. Alive, In Out incremental.
  5. Filter-ID=Policy .

PPPoE/PPP
netams+radius, .

NeTAMS, FreeRADIUS, PPP, PPPoE 192.168.0.1, fxp0.
### /etc/ppp/ppp.conf #####################################
default:
 enable dns         # request DNS info (for resolv.conf)

pppoe:
  set log Phase Chat LCP IPCP CCP tun command
  set radius /etc/ppp/radius.conf
  set speed sync
  set timeout 240
  set ctsrts off
  set accmap 000a0000
  enable lqr
  set cd 5
  enable pap chap
  set ifaddr HISADDR 192.168.0.253 # .253 is the server's end
#############################################################
### /etc/ppp/radius.conf ####################################
auth 192.168.0.1 secretkey 5 3
#############################################################
PPPoE:
/usr/libexec/pppoed -p \* -l pppoe fxp0
FreeRADIUS
FreeRADIUS . , .. .
cd /usr/ports/net/freeradius/
make && make install
NeTAMS rlm_netams ; :
cd ~/netams/addon/
cp -rp rlm_netams /usr/ports/net/freeradius/work/freeradius-1.0.1/src/modules/
cd /usr/ports/net/freeradius/work/freeradius-1.0.1/src/modules/rlm_netams
gmake
gmake install
FreeRADIUS, :
### /usr/local/etc/raddb/clients.conf #######################
client 192.168.0.1 {
        secret = secretkey
        shortname = pppoe_server
        }
#############################################################
rlm_netams:
### /usr/local/etc/raddb/radius.conf #######################
...
modules {
	...
	netams {
		server = "192.168.0.1"	# netams server IP
		port  = 20001   		# netams server port
		login = "freeradius"	# netams access username
		password = "ABCDEF" 	# netams access password
		swap-inout = "yes"		# swap IN and OUT counters for accounting
		defaultpolicy = "RadAcc"# policy for rawdata
		billing-login = "no"	# check username from unit or billing
	}
}

authorize {
	...
	netams
}
	
authenticate {
	...
	netams
}

accounting {
	...
	netams
}
#############################################################
NeTAMS
, NeTAMS:
### /usr/local/etc/netams.cfg ###############################
user oid 0832ED name freeradius password ABCDEF permit radius
#############################################################
- mod_auth_radius, :
### /usr/local/etc/netams.cfg ###############################
service html
...
htaccess radius
...
#############################################################
Apache ()
mod_auth_radius : http://www.freeradius.org/mod_auth_radius/
, :
apxs -i -a -c mod_auth_radius.c
:
...
<IfModule mod_auth_radius.c>
AddRadiusAuth 192.168.0.1:1812 secretkey 5:3
AddRadiusCookieValid 5
</IfModule>
...
<Location /stat>
AllowOverride All
</Location>
...
. , client1 abc, 192.168.0.111, filter1 OID ABCFEF.

NeTAMS netamsctl:
~#netamsctl radius auth nas login client1 password abc nas-id TEST
1 2
Framed-IP-Address: 192.168.0.111
Filter-ID: ABCFEF filter1
"1" "", "2" , .
IP- , - OID ( if-up). :
~#netamsctl radius auth nas login client1 password abcef nas-id TEST
0 password incorrect for client1
- EVENTS SQL.

, RADIUS-, , -X:
/usr/local/sbin/radiusd -X

TODO

  • , NAS-. , data-source.
  • Cisco ( ?)
  • : target radius-filter XXX. , XXX .
  • rlm_netams RADIUS-? FreeRADIUS .

[an error occurred while processing this directive]