Using FreeRadius as a relay for when external (Cloud) Radius servers go down?
Hi List! I am new to FreeRadius and am wondering: 1) If it is possible to set up FreeRadius as a relay for my external Radius service? 2) Is it possible to use this FreeRadius-server as a fallback when the external service goes down? 3) That would be a good start reading into how to set this up? I have seen "radrelay"[1], but this seems to be old. All help is greatly appreciated, Thanks, KL [1] http://linux.die.net/man/5/radrelay.conf
On Jan 12, 2015, at 7:15 AM, John Doe <kl.forwarder@gmail.com> wrote:
I am new to FreeRadius and am wondering: 1) If it is possible to set up FreeRadius as a relay for my external Radius service?
Yes. This is called proxying.
2) Is it possible to use this FreeRadius-server as a fallback when the external service goes down?
Yes. See “fallback” in raddb/proxy.conf.
3) That would be a good start reading into how to set this up? I have seen "radrelay"[1], but this seems to be old.
Read raddb/proxy.conf. Alan DeKok.
Hello, Just looking for some documentation/assistance with using VMPS with SQL. I have this working with the mac2vlan flat file, but SQL will make for a more eloquent solution. I should mention that I have only very basic requirements, I only need to pass a vlan to a cisco switch, based on the mac address seen on the port. This is an isolated environment (for imaging systems), so security is not a concern. A couple of questions: 1. I do not see any fields in the schemas that come with Freeradius for the mac address, simple enough to add somewhere, but wanted to make sure I’m not missing anything. 2. I have a very simple requirement, as I only need to map mac to vlan, can I just create/use a DB that only has these 2 columns (mac, vlan)? 3. What is the variable that sends back the vlan in the reply? from the VMPS virtual server config, I see %{VMPS-Cookie} for the MAC, but nothing for the vlan. In the VMPS-VLAN-Name = , I have put the default vlan id, which provides a vlan, where there is not one matched to the mac in the mac2vlan file (I assume this is the way it’s supposed to work). Thanks! Keith
On Jan 12, 2015, at 6:14 PM, Keith Olsen <keith.r.olsen@gmail.com> wrote:
Just looking for some documentation/assistance with using VMPS with SQL. I have this working with the mac2vlan flat file, but SQL will make for a more eloquent solution.
OK.
1. I do not see any fields in the schemas that come with Freeradius for the mac address, simple enough to add somewhere, but wanted to make sure I’m not missing anything.
There aren’t any. It should be simple.
2. I have a very simple requirement, as I only need to map mac to vlan, can I just create/use a DB that only has these 2 columns (mac, vlan)?
Yes. Then write a SELECT statement: update reply { VMPS-VLAN-Name := “%{sql: SELECT clan from mac2vlan where mac = %{VMPS-Cookie}}" } Something like that should work, presuming you have a simple table with simple names.
3. What is the variable that sends back the vlan in the reply?
VMPS-VLAN-Name
from the VMPS virtual server config, I see %{VMPS-Cookie} for the MAC, but nothing for the vlan.
See the configuration for the mac2vlan module. It talks about VMPS-VLAN-Name.
In the VMPS-VLAN-Name = , I have put the default vlan id, which provides a vlan, where there is not one matched to the mac in the mac2vlan file (I assume this is the way it’s supposed to work).
Yes. Alan DeKok.
participants (3)
-
Alan DeKok -
John Doe -
Keith Olsen