Hi, I’m trying to deploy FreeRadius as an accounting solution in my network. my scenario is like this: [image attached] Fortigate Firewall is already integrated with Active Directory and may send authenticated requests to FreeRadius, which is as well integrated with Active Directory. The work to be done: 1. using NAS (Fortigate Firewall in this case) attributes to do the accounting; 2. Specifying special Active Directory groups in FreeRadius configuration to have Internet access. May you help me with the solution or at least give me some hints? Thanks, Alireza Goftari
You will post a question ONCE, and only once. Replying to other threads with your question is rude. Don't do it. Your configuration is possible. 1) FreeRADIUS stores all accounting data in the "detail" file. Or, in SQL. See the raddb/sql/.../dialup.conf file. They're text for a reason. You can edit them to add any attribute you want 2) yes, you can use AD to do groups. Configure AD as an LDAP server, and use LDAP-Group for comparisons. There are examples. Alan DeKok.
participants (2)
-
Alan DeKok -
Alireza Goftari