Trouble setting up vmps with 3.0.8 (3 series)
Hello gents, I love the the spirit of the freeradius software and am really hoping to use it for some testing in my home environment. Alas, I am having some definate trouble setting it up. When I use the magical google, all examples are for 2.0 and the documentation for setting up vmps with the 3 series appears a bit... lacking at least for my taste. What I have done so far. radiusd.conf [root@vmps01 raddb]# grep -v '^$' radiusd.conf|grep -v '#' prefix = /usr/local/freeradius exec_prefix = ${prefix} sysconfdir = ${prefix}/etc localstatedir = ${prefix}/var sbindir = ${exec_prefix}/sbin logdir = ${localstatedir}/log/radius raddbdir = ${sysconfdir}/raddb radacctdir = ${logdir}/radacct name = radiusd confdir = ${raddbdir} modconfdir = ${confdir}/mods-config certdir = ${confdir}/certs cadir = ${confdir}/certs run_dir = ${localstatedir}/run/${name} db_dir = ${raddbdir} libdir = ${exec_prefix}/lib pidfile = ${run_dir}/${name}.pid correct_escapes = true max_request_time = 30 cleanup_delay = 5 max_requests = 1024 hostname_lookups = no log { destination = files colourise = yes file = ${logdir}/radius.log syslog_facility = daemon stripped_names = no auth = no auth_badpass = no auth_goodpass = no msg_denied = "You are already logged in - access denied" } checkrad = ${sbindir}/checkrad security { allow_core_dumps = no max_attributes = 200 reject_delay = 1 status_server = yes allow_vulnerable_openssl = yes } proxy_requests = yes $INCLUDE proxy.conf $INCLUDE clients.conf thread pool { start_servers = 5 max_servers = 32 min_spare_servers = 3 max_spare_servers = 10 max_requests_per_server = 0 auto_limit_acct = no } modules { $INCLUDE mods-enabled/ } instantiate { } policy { $INCLUDE policy.d/ } $INCLUDE sites-enabled/ [root@vmps01 raddb]# [root@vmps01 raddb]# grep -v '^$' mods-enabled/mac2vlan|grep -v '#' passwd mac2vlan { filename = ${modconfdir}/${.:name}/${.:instance} format = "*VMPS-Mac:=VMPS-VLAN-Name" delimiter = "," } [root@vmps01 raddb]# [root@vmps01 raddb]# grep -v '^$' mods-config/passwd/mac2vlan|grep -v '#' 00:1C:B3:09:85:15,Server 00:1C:B3:09:85:16,VLAN1 00:1C:B3:09:85:17,VLAN2 [root@vmps01 raddb]# [root@vmps01 raddb]# grep -v '^$' clients.conf|grep -v '#' client localhost { ipaddr = 127.0.0.1 proto = * secret = testing123 require_message_authenticator = no limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } client localhost_ipv6 { ipv6addr = ::1 secret = testing123 } client lex { ipaddr = 192.168.1.0/24 secret = testing123456 } [root@vmps01 raddb]# My switches are on 192.168.1.10 & 192.168.1.11 Neither config on the switches accepts a secret (as defined in the clients.conf file) but I tried running the config without it, and the service would not start. Default installation enabled a bunch of other modules, but really I only want vmps (mac2vlan), but documentation doesn't really detail what I can remove to have vmps only service. Please help, thank you in advance, -- Manny
On Jun 16, 2015, at 3:11 PM, Manny <mvarroyo3+freeradius@gmail.com> wrote:
I love the the spirit of the freeradius software and am really hoping to use it for some testing in my home environment. Alas, I am having some definate trouble setting it up. When I use the magical google, all examples are for 2.0 and the documentation for setting up vmps with the 3 series appears a bit... lacking at least for my taste.
The VMPS examples from v2 should work exactly the same in v3.
What I have done so far.
I'd suggest (as always) starting with the default configuration. Then, enable vmps.
[root@vmps01 raddb]# grep -v '^$' mods-enabled/mac2vlan|grep -v '#'
It would be simpler (and politer) to explain what you've done. Just dumping config files to an email isn't helpful. That doesn't let me know what your description of what's been done.
Neither config on the switches accepts a secret (as defined in the clients.conf file) but I tried running the config without it, and the service would not start.
Yes. That's a side effect of FreeRADIUS being a RADIUS server. It needs secrets for clients, even for VMPS clients.
Default installation enabled a bunch of other modules, but really I only want vmps (mac2vlan), but documentation doesn't really detail what I can remove to have vmps only service.
Everything necessary is in raddb/sites-enabled/. If the only file there is "vmps", then it's only running VMPS. Alan DeKok.
participants (2)
-
Alan DeKok -
Manny