找回密码
 注册

QQ登录

只需一步,快速开始

搜索
查看: 4224|回复: 1

[radius] freeradius对连ros问题

[复制链接]
发表于 2012-10-8 16:25:23 | 显示全部楼层 |阅读模式

马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。

您需要 登录 才可以下载或查看,没有账号?注册

×
ros 5.20  , radius manager 3.9 密钥和ROS设置一直并指向ros ip  ros建立ppoe ros radius ip指向freeradius ip    ros secrect 选中 ros中配置确定没有错误

问题:

      在RADIUS 服务状态: RADIUSD运行   为什么在 radius manager 建立帐号  无法登陆 只有在 ros secret 中建立的帐号才能登陆?

radius.log

Tue Oct  9 00:09:04 2012 : Info: Exiting normally.
Tue Oct  9 00:09:07 2012 : Info: Loaded virtual server <default>
Tue Oct  9 00:09:07 2012 : Info: Loaded virtual server inner-tunnel
Tue Oct  9 00:09:07 2012 : Info: Ready to process requests.

[root@localhost 172.17.0.1]# cat detail-20121008
Mon Oct  8 23:02:21 2012
        Acct-Status-Type = Accounting-On
        NAS-Identifier = "MikroTik"
        Acct-Delay-Time = 0
        NAS-IP-Address = 172.17.0.1
        Acct-Unique-Session-Id = "ef14a4b788058783"
        Timestamp = 1349708541

sql.conf 配置如下:

  1. sql {
  2.         database = "mysql"
  3.         driver = "rlm_sql_${database}"
  4.         server = "localhost"
  5.         login = "radius"
  6.         password = "radpass"
  7.         radius_db = "radius"
  8.         acct_table1 = "radacct"
  9.         acct_table2 = "radacct"
  10.         postauth_table = "radpostauth"
  11.         authcheck_table = "radcheck"
  12.         authreply_table = "radreply"
  13.         groupcheck_table = "radgroupcheck"
  14.         groupreply_table = "radgroupreply"
  15.         usergroup_table = "radusergroup"
  16.         deletestalesessions = yes
  17.         sqltrace = no
  18.         sqltracefile = ${logdir}/sqltrace.sql
  19.         num_sql_socks = 5
  20.         connect_failure_retry_delay = 60
  21.         lifetime = 0
  22.         max_queries = 0
  23.         nas_table = "nas"
  24.         $INCLUDE sql/${database}/dialup.conf
复制代码
radiusd.conf 如下:
  1. prefix = /usr/local
  2. exec_prefix = ${prefix}
  3. sysconfdir = ${prefix}/etc
  4. localstatedir = ${prefix}/var
  5. sbindir = ${exec_prefix}/sbin
  6. logdir = ${localstatedir}/log/radius
  7. raddbdir = ${sysconfdir}/raddb
  8. radacctdir = ${logdir}/radacct

  9. name = radiusd

  10. confdir = ${raddbdir}
  11. run_dir = ${localstatedir}/run/${name}

  12. db_dir = ${raddbdir}

  13. libdir = ${exec_prefix}/lib

  14. pidfile = ${run_dir}/${name}.pid



  15. max_request_time = 30

  16. cleanup_delay = 5

  17. max_requests = 1024

  18. listen {
  19.         type = auth


  20.         ipaddr = *


  21.         port = 0


  22. }

  23. listen {
  24.         ipaddr = *
  25.         port = 0
  26.         type = acct
  27. }

  28. hostname_lookups = no

  29. allow_core_dumps = no

  30. regular_expressions     = yes
  31. extended_expressions    = yes

  32. log {
  33.         destination = files

  34.         file = ${logdir}/radius.log


  35.         syslog_facility = daemon

  36.         stripped_names = no

  37.         auth = no

  38.         auth_badpass = no
  39.         auth_goodpass = no

  40. }

  41. checkrad = ${sbindir}/checkrad

  42. security {
  43.         max_attributes = 200

  44.         reject_delay = 1

  45.         status_server = yes
  46. }

  47. proxy_requests  = yes
  48. $INCLUDE proxy.conf



  49. $INCLUDE clients.conf


  50. thread pool {
  51.         start_servers = 5

  52.         max_servers = 32

  53.         min_spare_servers = 3
  54.         max_spare_servers = 10


  55.         max_requests_per_server = 0
  56. }

  57. modules {

  58.         $INCLUDE ${confdir}/modules/

  59.         $INCLUDE eap.conf



  60. }

  61. instantiate {
  62.         exec

  63.         expr

  64.         expiration
  65.         logintime

  66. }

  67. $INCLUDE policy.conf

  68. $INCLUDE sites-enabled/
复制代码
client.conf 如下:
  1. client localhost {
  2.         ipaddr = 127.0.0.1





  3.         secret          = testing123

  4.         require_message_authenticator = no







  5. }






  6. client 172.17.0.1 {
  7.         secret          = radius
  8.         shortname       = Localhost
  9. }
复制代码
routeros
发表于 2012-10-9 06:20:55 来自手机 | 显示全部楼层
在RADIUS 服务状态: RADIUSD运行   为什么在 radius manager 建立帐号  无法登陆 只有在 ros secret 中建立的帐号才能登陆?

就这一句,证明ros跟rm没对接上
routeros
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 注册

本版积分规则

QQ|Archiver|手机版|小黑屋|软路由 ( 渝ICP备15001194号-1|渝公网安备 50011602500124号 )

GMT+8, 2024-11-24 02:42 , Processed in 0.081025 second(s), 4 queries , Gzip On, Redis On.

Powered by Discuz! X3.5 Licensed

© 2001-2024 Discuz! Team.

快速回复 返回顶部 返回列表