Hey Ignacio, I am in a need to get a Nomadix AG3100 gateway to do the same thing as you have done - get it authenticate to FreeRADIUS and redirect to portal pages for a simple user/pass login. I've exchanged a bunch of emails with their support team (which is awful) and read their guides but it's terribly cumbersome and seems that some kind of XML interface is required to be implemented. I was hoping to get some pointers from you on getting this working, Thanks, Liran. On Mon, Jul 24, 2006 at 12:14 PM, Ignacio Siles <ignacio.siles@libera.net>wrote:
Hello,
I am trying to implement a Nomadix AG-5000 public NAS in a in a network with an existing FreeRADIUS server. The environment is as follows:
- The customer wants nomadix to make public authentication (with captive portal and PAP) for guest users, and employees who can’t use the protected wireless network working with WPA-Enterprise authentication.
- The employees´ user names and passwords are stored in a LDAP structure.
- There is a freeRADIUS v 1.0.5 server which asks that LDAP structure for authentication.
So the Nomadix is configured as RADIUS client, connected to the FreeRADIUS server. I have tested the connection with test users stored in freeRADIUS´ “users” file, and everything worked fine. The problem starts with the Access-Accept RADIUS message. This message includes some tunnel attributes stored in the LDAP, which are necessary for the other networks to work properly. But the Nomadix does not understand those attributes and drops the Access-Accept messages, resulting in a
failed authentication.
The solution I’m thinking about is to remove this tunnel atributes of the Access-Accept message should they be sent to the Nomadix. I’ve read about rlm_attr_filter, but I don’t know how to configure it to remove tunnel attribures should the Nomadix be acting as the NAS.
File /etc/raddb/attrs:
DEFAULT
Packet-type =* ANY,
EAP-Message =* ANY,
User-Name =* ANY,
Message-Authenticator =* ANY,
State =* ANY,
Tunnel-Type := VLAN,
Tunnel-Medium-Type := IEEE-802
Tunnel-Private-Group-Id := “55”
Thank you in advance,