Sei sulla pagina 1di 2

Steps to configure FreeRadius Server for VF specific call-flow:

1. Download latest freeradius from http://freeradius.org/download.html . Extract the package. 2. Go into the extracted dir. And execute the following commands. a. ./configure --prefix=$HOME/freeRadius --with-modules=rlm_sim_files b. make c. make install 3. In the $HOME/freeRadius/etc/raddb/radius.conf file, add following to the modules{} section. sim_files { } 4. In the $HOME/freeRadius/etc/raddb/radius.conf file, add following to the to the instantiate {..} section. sim_files 5. In the $HOME/freeRadius/etc/raddb/eap.conf, do the following changes in eap {..} section. a. Change the default_eap_type value to sim. default_eap_type = sim b. Add the following block. sim{ } 6. In authorize { ..} section in the $HOME/freeRadius/etc/raddb/sites-enabled/default file add the following after preprocess sim_files eap { ok = return } if(Packet-Type == "Access-Accept"){ #if(User-Name == "100100000000002@wlan.mnc100.mcc100.3gppnetwork.org"){ update reply { Chargeable-User-Identity = "99999999" Ruckus-Qos = "9999" Ruckus-cc-attr = "99" } #} } 7. Triplet configuration a. Go into the directory $HOME/freeRadius/etc/raddb . Create a file with name simtriplets.dat. b. Add the triplets for each username in simtriplets.dat file as follows. There must be 5 entries for each username. # username RAND SRES Kc VFUK3/100100000000001@wlan.mnc100.mcc100.3gppnetwork.org,3400000000000000000 0000000000000,34112233,445566778899AABB VFUK3/100100000000001@wlan.mnc100.mcc100.3gppnetwork.org,3400000000000000000 0000000000000,34112233,445566778899AABB VFUK3/100100000000001@wlan.mnc100.mcc100.3gppnetwork.org,3400000000000000000 0000000000000,34112233,445566778899AABB

VFUK3/100100000000001@wlan.mnc100.mcc100.3gppnetwork.org,3400000000000000000 0000000000000,34112233,445566778899AABB VFUK3/100100000000001@wlan.mnc100.mcc100.3gppnetwork.org,3400000000000000000 0000000000000,34112233,445566778899AABB 8. Add allowed clients to $HOME/freeRadius/etc/raddb/clients.conf as follows. client 10.1.0.111 { ipaddr = 10.1.0.111 secret = testing123 require_message_authenticator = no } 9. Start the server a. cd $HOME/freeRadius/sbin b. execute following command. ./radiusd -f -X Execute ./radiusd help for more options. 10. For adding AVPs in Access-Accept, please modify the update reply {..} section in the $HOME/freeRadius/etc/raddb/sites-enabled/default file. It looks like follows if(Packet-Type == "Access-Accept"){ #if(User-Name == "100100000000002@wlan.mnc100.mcc100.3gppnetwork.org"){ update reply { Chargeable-User-Identity = "99999999" Ruckus-Qos = "9999" Ruckus-cc-attr = "99" } #} } Please add/modify the same as per your requirement.

Potrebbero piacerti anche