juniper authentication with freeradius
hi, oh.. i didnt have dictionary.juniper file under /etc/freeradius. so i added those lines in "dictionary" file under /etc/freeradius. and this is my juniper side configuration. authentication-order [ radius password ]; radius-server { 192.168.1.49 { port 1812; accounting-port 1813; secret "$9$mTnCOBEyrvO1SeKM-d"; ## SECRET-DATA } } i tried doing it without specifying the ports as well..but didnt work. under "users" file i have this edward Auth-type := Local, User-Password = "edward" Juniper-Local-User-Name = "fritz12" clients.conf contains client 192.168.1.10/24 { secret = secret shortname = junoscope.server.name type = Juniper:nas } On 8/16/07, freeradius-users-request@lists.freeradius.org < freeradius-users-request@lists.freeradius.org> wrote:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: juniper authentication with freeradius (Bj?rn Mork)
----------------------------------------------------------------------
Message: 1 Date: Thu, 16 Aug 2007 11:20:09 +0200 From: Bj?rn Mork <bjorn@mork.no> Subject: Re: juniper authentication with freeradius To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <87wsvv3kfq.fsf@obelix.mork.no> Content-Type: text/plain; charset=iso-8859-1
"ashish verma" <ashish.scit@gmail.com> writes:
I am trying to do juniper m7i router authentication with freeradius. Can someone provide me some documentation?
I have configured juniper but i suppose i missing something on radius side.
You don't say how you configured neither the JUNOS box nor FreeRADIUS. My guess is that you're lacking something on the router:
http://www.juniper.net/techpubs/software/junos/junos84/swconfig84-system-bas...
added following in dictionary file.
why? They have been in the default dictionary.juniper for ages.
Bj?rn
------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
End of Freeradius-Users Digest, Vol 28, Issue 55 ************************************************
"ashish verma" <ashish.scit@gmail.com> writes:
oh.. i didnt have dictionary.juniper file under /etc/freeradius. so i added those lines in "dictionary" file under /etc/freeradius. and this is my juniper side configuration.
authentication-order [ radius password ]; radius-server { 192.168.1.49 { port 1812; accounting-port 1813; secret "$9$mTnCOBEyrvO1SeKM-d"; ## SECRET-DATA } }
You might need to specify the source address here. I.e. radius-server { 192.168.1.49 { port 1812; accounting-port 1813; secret "$9$mTnCOBEyrvO1SeKM-d"; ## SECRET-DATA source-address 192.168.1.10; } }
i tried doing it without specifying the ports as well..but didnt work.
under "users" file i have this
edward Auth-type := Local, User-Password = "edward" Juniper-Local-User-Name = "fritz12"
Did you define the local user "fritz12" on the router?
clients.conf contains
client 192.168.1.10/24 { secret = secret shortname = junoscope.server.name type = Juniper:nas }
That's a somewhat strange entry. I would have expected either 'client 192.168.1.0/24' or 'client 192.168.1.1' Do you get anything in the radius logs, indicating that the connection is OK? Bjørn
participants (2)
-
ashish verma -
Bjørn Mork