OPNsense Forum

English Forums => General Discussion => Topic started by: Rout3rx on March 05, 2018, 06:28:03 AM

Title: use remote radius server
Post by: Rout3rx on March 05, 2018, 06:28:03 AM
Hello
i want to use remote radius server for pptp and all vpn servers on opnsense
i should pass 2 these flags in accounting request to radius server :

this is a opnsense packet :
opensense packets: 
  Packet-Type = Access-Request
  NAS-Identifier = "OPNsense.localdomain"
  Acct-Session-Id = "9724037-L-1"
  NAS-Port = 1
  NAS-Port-Type = Virtual
  Service-Type = Framed-User
  Framed-Protocol = PPP
  Attr-26.12341.12 = 0x4c2d31
  Attr-26.12341.19 = 0x4d5352415356352e3230204d535241532d302d4b4149504f442004b6561c95d06441a7807f6d05042e31
  Tunnel-Type:0 = PPTP
  Tunnel-Medium-Type:0 = IPv4
  Tunnel-Server-Endpoint:0 = "192.168.30.5"
  Tunnel-Client-Endpoint:0 = "192.168.50.92"
  Tunnel-Server-Auth-Id:0 = "OPNsense.localdomain"
  User-Name = "m"
  MS-CHAP-Challenge = 0xbb1e68137474a650c11db9b16393f933
  MS-CHAP2-Response = 0x01009fed02e9a440f37de8e743a68576a3f60000000000000000352f6b2976a6cb2c95df51b0fdf2f76184d83172d78fd571
  Event-Timestamp = "Feb 27 2018 13:04:33 +0330"
  NAS-IP-Address = 85.xx.xx.xx
  Timestamp = 1519724073


but i should use this packet format :
normal packets:
  Packet-Type = Access-Request
  NAS-Port-Type = Wireless-802.11
  Calling-Station-Id = "30:85:A9:EC:C7:FE"
  Called-Station-Id = "hotspot1"
  NAS-Port-Id = "ether2-Local Lan"
  User-Name = "m.tabatabaenasab"
  NAS-Port = 2160067826
  Acct-Session-Id = "80c004f2"
  Framed-IP-Address = 192.168.26.68
  Mikrotik-Host-IP = 192.168.26.68
  CHAP-Challenge = 0xa86f1fa69d1e9f28534dcd19f06ed86a
  CHAP-Password = 0xd5c8d303b94c8054a8e5b15db5eec036b4
  Service-Type = Login-User
  WISPr-Logoff-URL = "http://192.168.26.1/logout"
  NAS-Identifier = "201710301048561303YWr2"
  NAS-IP-Address = 192.168.2.1
  Event-Timestamp = "Jan 27 2018 14:17:39 +0330"
  Timestamp = 1517050059


in fact i need two this flag in request packet:

Calling-Station-Id =
CHAP-Password =

how can i configure opnsense to use this format of request ?
Title: Re: use remote radius server
Post by: mimugmail on March 05, 2018, 08:02:56 AM
CHAP or MSCHAP comes from the client. You can set CHAP in PPTP Client (but I would not use it in production)