FreeRadius With VEGA

Overview

The purpose of this guide is to provide step by step, quick and easy way to deploy FreeRadius server. You will learn how to install FreeRadius server on your Linux system and how to configure the same to work with VEGA (as radius client)

 FreeRADIUS basically includes a RADIUS server, a BSD licensed client library, a PAM library, and an Apache module.

Installation of FreeRadius

FreeRadius is easy to install. FreeRadius can be installed on Linux server by issuing commands like:

                         OR 

For further information with respect to installation of FreeRadius please refer to below useful links:

http://freeradius.org/doc/getting_started.html

https://www.unixmen.com/installation-freeradius-centos-ubuntu/

NOTE: There is no need to perform SQL stuff as given in above guide in order to make VEGA working with FreeRadius server.

Configuration Of FreeRadius

Configuration on FreeRadius with respect to VEGA can be divided in to three parts:

1. Adding Vendor

2. Adding User

3. Adding Client

Vendor Addition

In order to add VEGA specific vendor in FreeRadius we need to create a new file say name “dictionary.sangoma” within “/usr/share/freeradius/” directory and add below lines in to the file:

Now, edit “/usr/share/freeradius/dictionary” file by in order to include the above created file by adding below line:

Now, proceed with next configuration i.e. Adding users.

User Addition

In order to add VEGA specific user in FreeRadius users list we need to edit “/etc/raddb/users” file. Find the user and defined the new variables for e.g. “Sangoma-vega-Privilege=admin” under the user created.

For example, if vega has a user say “user1” with password as “password1” with admin privileges then below lines needs to be included within “/etc/raddb/users”:

Now, proceed with next configuration i.e. Adding client.

Client Addition

Adding client is important part of configuration as this configuration tells FreeRadius to allow connection from vega network.

In order to add New Client (VEGA as client) edit “/etc/raddb/clients.conf" and add below lines:

NOTE:

• 192.168.3.176 is the vega ip i.e. the radius client

• secret must be the password of radius server which needs to be used/configured by client in order to establish connection with radius server (in this case it is testing)

• shortname is the alias which user wants to assign to client

Troubleshooting FreeRadius

Step 1) In order to test if your configured client is working fine first we need to start FreeRadius server using below command:

In order to start radius server in debugging/troubleshooting mode we can always start radius server using below command:

Step 2) Now, tail the system logs to check what is occurring using below command:

Now, issue below command in order to test if the client account is properly configured or not for example in this case we will test “VEGA” with user as “user1” by issuing below command:

The above command will give output as given below:

In order to check how to configure VEGA as Radius client please refer to VEGA RADIUS Configuration.

Reference

For more reference on freeradius always refer to below links:

• http://freeradius.org/

• https://wiki.freeradius.org/guide/Concepts

• https://wiki.freeradius.org/guide/Basic-configuration-HOWTO

etc.