Red Hat NETWORK 4.1.0 - Podręcznik Użytkownika Pobierz pdf (Strona 100)

100

101

Chapter 17

Manual FreeRADIUS 2 configuration 96

authorize {

preprocess

eap {

ok = return

}

files

expiration

logintime

}

authenticate {

Auth-Type MS-CHAP {

mschap

}

eap

}

post-auth {

perl

}

In /usr/local/pf/raddb/users

Add the following lines where we define that non-EAP messages should, by default, lead to an

authentication acceptation.

DEFAULT EAP-Message !* "", Auth-Type := Accept

Comment or delete all other statements.

Optional: Wired or Wireless 802.1X

configuration

Generate cryptographic material for the EAP tunnel (802.1X) to work. Run as root:

cd /usr/local/pf/raddb/certs

make

In /usr/local/pf/conf/radiusd/eap.conf

Make sure this file looks like:

1 2 ... 95 96 97 98 99 100 101

Version 4.1.0 - December 2013 2
Table of Contents 3
AboutthisGuide 5
Introduction 6
Network Integration 9
Components 10
System Requirements 11
Operating System Requirements 12
Installation 13
RHEL 6.x 14
Debian and Ubuntu 14
Software Download 15
Software Installation 15
Configuration 17
Apache Configuration 18
Roles Management 19
Authentication 20
Working modes 22
SNMP v1, v2c and v3 22
From PacketFence to a switch 23
From a switch to PacketFence 23
Switch Configuration 23
Web Services Interface 24
Radius Secret 24
Default VLAN/role assignment 25
Hybrid mode 26
(networks.conf) 26
Production DHCP access 27
Interface in every VLAN 28
Routed Networks 29
FreeRADIUS Configuration 32
Samba / Kerberos / Winbind 33
Starting PacketFence Services 37
Log files 38
Passthrough 38
Proxy Interception 39
Configuration by example 40
Network Interfaces 41
Switch Setup 42
Inline enforcement specifics 47
Optional components 49
Violations 50
Compliance Checks 53
Scan on registration 55
RADIUS Accounting 56
Oinkmaster 57
Floating Network Devices 57
Here is how it works: 58
Identification 58
Guests Management 59
Managed guests 60
Guest pre-registration 60
Statement of Health (SoH) 62
Configuration of SoH policy 63
Policy example 63
Configure the feature 64
SNMP Traps Limit 65
Billing Engine 65
Portal Profiles 66
OAuth2 Authentication 67
Gaming Devices Registration 68
Iptables 69
Log Rotations 69
Logrotate (recommended) 69
Log4perl 69
High Availability 70
Partitioning 71
DRBD Configuration and setup 71
MySQL Configuration 73
Heartbeat configuration 74
RADIUS HA configuration 76
Performance optimization 77
MySQL optimization tool 79
Keeping tables small 79
Captive Portal Optimizations 80
Frequently Asked Questions 81
VLAN assignment techniques 82
MAC notification traps 85
Port Security traps 85
Device configuration 86
Access control 86
Limitations 86
More on VoIP Integration 89
Mac Authentication and 802.1X 90
Additional Information 91
Information 92
Chapter 17 93
Administration Tools 90 94
Web Admin GUI 98
In /usr/local/pf/raddb/users 100

Komentarze do niniejszej Instrukcji

Brak uwag

Red Hat NETWORK 4.1.0 - Podręcznik Użytkownika Strona 100

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Serwery Red Hat NETWORK 4.1.0 -