Trouble setting up vmps with 3.0.8 (3 series)

16 Jun 2015

      Hello gents,

I love the the spirit of the freeradius software and am really hoping to
use it for some testing in my home environment. Alas,  I am having some
definate trouble setting it up. When I use the magical google, all examples
are for 2.0 and the documentation for setting up vmps with the 3 series
appears a bit... lacking at least for my taste.

What I have done so far.

radiusd.conf
[root@vmps01 raddb]# grep -v '^$' radiusd.conf|grep -v '#'
prefix = /usr/local/freeradius
exec_prefix = ${prefix}
sysconfdir = ${prefix}/etc
localstatedir = ${prefix}/var
sbindir = ${exec_prefix}/sbin
logdir = ${localstatedir}/log/radius
raddbdir = ${sysconfdir}/raddb
radacctdir = ${logdir}/radacct
name = radiusd
confdir = ${raddbdir}
modconfdir = ${confdir}/mods-config
certdir = ${confdir}/certs
cadir   = ${confdir}/certs
run_dir = ${localstatedir}/run/${name}
db_dir = ${raddbdir}
libdir = ${exec_prefix}/lib
pidfile = ${run_dir}/${name}.pid
correct_escapes = true
max_request_time = 30
cleanup_delay = 5
max_requests = 1024
hostname_lookups = no
log {
        destination = files
        colourise = yes
        file = ${logdir}/radius.log
        syslog_facility = daemon
        stripped_names = no
        auth = no
        auth_badpass = no
        auth_goodpass = no
        msg_denied = "You are already logged in - access denied"
}
checkrad = ${sbindir}/checkrad
security {
        allow_core_dumps = no
        max_attributes = 200
        reject_delay = 1
        status_server = yes
        allow_vulnerable_openssl = yes
}
proxy_requests  = yes
$INCLUDE proxy.conf
$INCLUDE clients.conf
thread pool {
        start_servers = 5
        max_servers = 32
        min_spare_servers = 3
        max_spare_servers = 10
        max_requests_per_server = 0
        auto_limit_acct = no
}
modules {
        $INCLUDE mods-enabled/
}
instantiate {
}
policy {
        $INCLUDE policy.d/
}
$INCLUDE sites-enabled/
[root@vmps01 raddb]#

[root@vmps01 raddb]# grep -v '^$' mods-enabled/mac2vlan|grep -v '#'
passwd mac2vlan {
        filename = ${modconfdir}/${.:name}/${.:instance}
        format = "*VMPS-Mac:=VMPS-VLAN-Name"
        delimiter = ","
}
[root@vmps01 raddb]#

[root@vmps01 raddb]# grep -v '^$' mods-config/passwd/mac2vlan|grep -v '#'
00:1C:B3:09:85:15,Server
00:1C:B3:09:85:16,VLAN1
00:1C:B3:09:85:17,VLAN2
[root@vmps01 raddb]#

[root@vmps01 raddb]# grep -v '^$' clients.conf|grep -v '#'
client localhost {
        ipaddr = 127.0.0.1
        proto = *
        secret = testing123
        require_message_authenticator = no
        limit {
                max_connections = 16
                lifetime = 0
                idle_timeout = 30
        }
}
client localhost_ipv6 {
        ipv6addr        = ::1
        secret          = testing123
}
client lex {
        ipaddr          = 192.168.1.0/24
        secret          = testing123456
}
[root@vmps01 raddb]#

My switches are on 192.168.1.10 & 192.168.1.11

Neither config on the switches accepts a secret (as defined in the
clients.conf file) but I tried running the config without it, and the
service would not start.

Default installation enabled a bunch of other modules, but really I only
want vmps (mac2vlan), but documentation doesn't really detail what I can
remove to have vmps only service.

Please help, thank you in advance,

--
Manny