January 2022 - Freeradius-Users - lists.freeradius.org

Radius requests from unknow hosts
by Marko Bozinovski 04 Jan '22

04 Jan '22

Hello, First time doing this, so I am not sure if i am doing it correctly. I have configured RADIUS server and setup few juniper devices. Configuration is ok, my clients can authenticate using radius etc. I am worried about one thing. When i configure one EX switch, it keeps sending some strange request, something like this (0) User-Name = "root" (0) User-Password = "\010\n\r\177IN" (0) NAS-Identifier = "EX1" (0) Calling-Station-Id = "165.22.195.82" (0) NAS-IPv6-Address = 2600:894c0:c0:30::6 Executing section authorize from file /etc/raddb/sites-enabled/default (0) authorize { NAS-IPv6-Address is the address of that EX, and NAS-Identifier is ok, but username root is strange, and calling-station-id. >From my perspective it looks like it is sending requests from that EX with username root. Sometimes it use other usernames. I have read that can be related to brute force attack's. Thank you and sorry for noob and confusing question. Marko

2 1

Self Service Kiosk / Workflow to trust untrusted devices to add them to personal VLAN dynamically
by Stefan Mueller 04 Jan '22

04 Jan '22

Hello FreeRADIUS user, I hope that someone out there is able to give me some piece of advice to my unusual idea. There are two WiFis in our multi-apartment building: 1. WPA2 EAP Auth - for trusted user (such as residents) using FreeRADIUS for authentication and dynamic VLAN assignment 2. WPA2 PSK (for guests, IoT without EAP support etc.) Currently, the admin has to assign printer, TV-Boxes etc. manually to the respective VLAN of a resident. The standard use case to make this necessary is to allow the respective resident to control the device by smartphone. Is it somehow possible to allow each resident to open an GUI and select untrusted devices (devices connected to the WPA2 PSK) and just click on a button to make them trusted, so their VLAN assignment will be change, means FreeRADIUS changes the following Mikrotik-Wireless-VLANID := 10, Mikrotik-Wireless-VLANID-Type := 0, due to this *workflow *triggered by an trusted user via the GUI? Thank you and a restful start into 2022 Stefan

2 4

How to use Virtual Servers
by Network RADIUS 04 Jan '22

04 Jan '22

** How to use FreeRADIUS virtual servers --------------------------------------------- Virtual servers provide a powerful way to define unique policies for different traffic sources. When policy rules for each traffic source are defined in their own separate configuration file, it’s a lot simpler to define them, understand them, and debug them. Virtual servers are unique to FreeRADIUS. Other RADIUS servers typically have one global policy, with sub-policies defined in a series of nested if/else statements. Unfortunately, the logic expressed in the if/else statements quickly becomes difficult to understand and maintain for all but the simplest scenarios. As the needs of the network infrastructure evolves over time, the logic statements grow in complexity and become error prone and difficult to debug. Changes to one piece may result in unexpected side effects. Read the full article… https://networkradius.com/articles/2021/09/25/virtual-servers.html <https://networkradius.com/articles/2021/09/25/virtual-servers.html> ** Sign up to get this content directly --------------------------------------------- Want to get these articles in all their HTML glory? Sign up here: http://eepurl.com/hwuWrn <http://eepurl.com/hwuWrn> ** Need RADIUS help? --------------------------------------------- Get commercial support from the team behind FreeRADIUS. https://networkradius.com/request/ <https://networkradius.com/contact/> ** What is the relationship between Network RADIUS and FreeRADIUS? ---------------------------------------------- FreeRADIUS is an open source implementation of the RADIUS protocol and was written by Alan DeKok in 1999. Network RADIUS is a private, for-profit company founded by Alan DeKok which provides commercial support for FreeRADIUS. The Network RADIUS team has been the primary contributor to FreeRADIUS for the last 20 years. The FreeRADIUS mailing list, wiki, and documentation are all moderated and maintained by the Network RADIUS team. FreeRADIUS has always been, and will always continue to be, open source. The Network RADIUS team provides commercial support to paying clients, and free product development for the FreeRADIUS community at large. All of our software development for FreeRADIUS is integrated into the Open Source platform, and will always continue to be.

1 0