IP Fire configuration problems
Hey people, i have big problems configuring ip fire to work with freeradius server. ip fire should be the authenticator and "ask" freeradius about the permission to open the connection from the green network to the wan. I just changed the necessary configuration of IP Fire. That it should use red/green/orange and assigned the interfaces. In the orange net there is the freeradius server (ubuntu server) and in the green net there are the clients (ubuntu/w10). The clients in the green net get their ip adresses dynamicallyfrom DHCP. The clients in the green network send their requests over the integrated ip-fire proxy in non transparent mode. Clients and server can ping addresses in the wan and each other. So everybody can reach everybody. After the installation of Freeradius i did the recommended functional test of the "getting started" section and it worked correctly. Now i cant find a solution to work with ipfire as an authenticator. Actually there are just a few settings to configure in the userinterface. wiki.ipfire.org/configuration/network/proxy/wui_conf/auth/radius I set up the following. IP and Ports (1812/1813) of the Radius Server, the Shared Secret, the hostname of the Radius Servers. Activated user identification and added the existing user (same as i tested locally, working fine) to the whitelist. If i now restart the server / clients, the clients are connected to the internet without identification by dhcp. for testing i deactivated the servers firewall. in the freeradius debugging shell nothing happens. Sorry because of my bad english. perhaps you have some idea what i obviously forgot to consider or perhaps had the same problem.. Would be nice to get some information. Kind regards Dennis
On Aug 17, 2021, at 6:36 AM, cptnftr via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
i have big problems configuring ip fire to work with freeradius server.
The description you gave was detailed, but didn't say anything about RADIUS. You configured the ipfire device to do RADIUS, and "it didn't work". OK, what does that mean? Did the RADIUS server receive packets? Did the RADIUS server reply with the wrong information? I have no idea how to help you here, because you're giving no information about the RADIUS side of things. Please read http://wiki.freeradius.org/list-help Alan DeKok.
participants (2)
-
Alan DeKok -
cptnftr