Hi, We are implementing a solution with FreeRadius+Mysql+Mikrotik. We need two types of authentication methods. 1. PPPoE 2. Via HTTP. For eg: When a user connects from the laptop, the browser should redirect to a website on which we can enter username & password and authenticate. It would be better if we can do this with an api so that we can use the same api to login to the network from the devices which doesn't support PPPoE. is this possible with FreeRadius. Which protocols I need to enable for this? I need to specify this in radgroupreply? with Framed-Protocol? But two protocol is possible at the same time? Please advice. -- Randeep Mob: +919880050349[B'lore] http://twitter.com/Randeeppr http://in.linkedin.com/in/randeeppr
On Jun 11, 2015, at 1:46 AM, Randeep <randeep123@gmail.com> wrote:
We are implementing a solution with FreeRadius+Mysql+Mikrotik.
We need two types of authentication methods.
1. PPPoE
That is a networking protocol. It's not an authentication method. PPP carries authentication methods such as PAP, CHAP, or MS-CHAP.
2. Via HTTP. For eg: When a user connects from the laptop, the browser should redirect to a website on which we can enter username & password and authenticate.
That's a hotspot, such as you see in an airport. FreeRADIUS doesn't implement that. Alan DeKok.
Hi Alan. On Thu, Jun 11, 2015 at 6:48 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 11, 2015, at 1:46 AM, Randeep <randeep123@gmail.com> wrote:
We are implementing a solution with FreeRadius+Mysql+Mikrotik.
We need two types of authentication methods.
1. PPPoE
That is a networking protocol. It's not an authentication method. PPP carries authentication methods such as PAP, CHAP, or MS-CHAP.
We are planning to provide isp services. We will be giving internet connections to users using fiber network. For this which is better PAP/CHAP/MS-CHAP? I read PAP works in clear text. And MS-chap will create any issues? as it is from microsoft? Are we free to use this in any network? or CHAP?
2. Via HTTP. For eg: When a user connects from the laptop, the browser should redirect to a website on which we can enter username & password and authenticate.
That's a hotspot, such as you see in an airport. FreeRADIUS doesn't implement that.
Alan DeKok.
Is it possible to authenticate using http api? like http://myradius.com/auth?username=?&password=? is this supported by radius server?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Regards, Randeep -- Randeep Mob: +919447831699[kerala] Mob: +919880050349[B'lore] http://twitter.com/Randeeppr http://in.linkedin.com/in/randeeppr [image: --] Randeep Raman [image: http://]about.me/Randeeppr <http://about.me/Randeeppr>
On Jun 11, 2015, at 11:13 AM, Randeep <randeep123@gmail.com> wrote:
We are planning to provide isp services. We will be giving internet connections to users using fiber network. For this which is better PAP/CHAP/MS-CHAP? I read PAP works in clear text. And MS-chap will create any issues? as it is from microsoft? Are we free to use this in any network? or CHAP?
Sorry, but this isn't really the place to learn how to create an ISP. In general, you buy equipment, and go with the defaults for the equipment.
Is it possible to authenticate using http api? like http://myradius.com/auth?username=?&password=? is this supported by radius server?
Yes. This is in the rest module in v3. Alan DeKok.
Hi Alan, I'm sorry. I'm new to all these. Thank you for the answers. Regards, Randeep On Thu, Jun 11, 2015 at 8:48 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 11, 2015, at 11:13 AM, Randeep <randeep123@gmail.com> wrote:
We are planning to provide isp services. We will be giving internet connections to users using fiber network. For this which is better PAP/CHAP/MS-CHAP? I read PAP works in clear text. And MS-chap will create any issues? as it is from microsoft? Are we free to use this in any network? or CHAP?
Sorry, but this isn't really the place to learn how to create an ISP. In general, you buy equipment, and go with the defaults for the equipment.
Is it possible to authenticate using http api? like http://myradius.com/auth?username=?&password=? is this supported by radius server?
Yes. This is in the rest module in v3.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Randeep Mob: +919447831699[kerala] Mob: +919880050349[B'lore] http://twitter.com/Randeeppr http://in.linkedin.com/in/randeeppr [image: --] Randeep Raman [image: http://]about.me/Randeeppr <http://about.me/Randeeppr>
participants (2)
-
Alan DeKok -
Randeep