Radius Server

[soernt.poppe]

Hi there,

I just installed OPNSense and I really like it so far :-)

The one thing I miss is a Radius Server that is running and integrated within OPNSense.
The background:
I split my network into several VLANs, I would like that the Switch-Port to VLAN-Id assignement is based on the Device (MAC-Address) or user name (+Password). Currently the each Switch-Port has a static assigned VLAN-Id.

I would like to see
a) An option to install FreeRadius Server within the PugIns
b) At the user account management I would like to assign a user a VLAN-Id.
c) Within the Radius configuration page an option to define a list of MAC addresses where I can set the VLAN-Id for each MAC Address.

Any chances to get something like that? ;D I did see that pfSense is offering something like that.

[franco]

Hi there,

We do have a freeradius package, but not the plugin as you said:

# pkg install freeradius3

This must be set up manually just like one would in FreeBSD.

Plugins require support from community contributors. So far I haven't spoken to anyone who wanted to build a RADIUS GUI, but maybe someone here can help?

Here's the current state of our plugins, from what they can possibly do to what we do offer at the moment:

https://github.com/opnsense/plugins#about-the-opnsense-plugins


Cheers,
Franco

[soernt.poppe]

Hi Franco,

thank your for your feedback.

I am not a professional admin. Installing the package is not the problem, but the integration within the existing authentification system is where I am lost.

It looks like that I need to manage the user and devices within the FreeRadius configuration files. That is not what I want.

Any chances to get the FreeRadius integration onto your road map for 2017?

Cheers,
Sörnt

[franco]

Hi Sörnt,

Chance for 17.7 is there, but it requires a human resource or sponsoring, because it's off our general track of improving the firewall itself.

I'm saying this in the hopes somebody will find the time to look at it and get started. We'll be here for help for integration.


Cheers,
Franco

[depekavienna]

Hi franco,

I am currently using freeradius package in pfSense and would love to see something similar in OPNsense.
Can you give me some hints where to start? How can I help?

[franco]

Hi,

A general description of how plugins are written is here:

https://docs.opnsense.org/development/examples/helloworld.html

Best to double-check against available plugins, can borrow ideas and code from there:

https://github.com/opnsense/plugins


Cheers,
Franco

[cslakira]

Hell All
I have a question that over 500 terms mac address need add to FreeRadius user
I must add mac address one term one time
Somebody know have toos or new FreeRadius have new function can insert like csv formate file include over 500 terms mac address
Thanks all

[Patrick M. Hausen]

Export a configuration backup, look at the XML, generate equivalent entries and merge them in a text editor. Re-import updated configuration.

Some scripting required but definitely doable.