radius
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
radius [2008/06/27 10:20] – kaiab | radius [2011/04/07 18:24] (current) – [Use cases] faltin | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | This page is a work in progress | + | ====== The Radius Accounting tool ====== |
- | ====== | + | {{: |
- | Radius is a NAV-tool that collects accounting-data from a [[http:// | + | ===== Use cases ===== |
+ | * If you have an [[http:// | ||
+ | * If you use IEEE 802.1X in your wired network and thus requires users to log in to get access, the NAV radius accounting tool can track these users as well. | ||
===== Accounting Log ===== | ===== Accounting Log ===== | ||
This tab allows you to search through the accounting log. Here you can specify and limit your search to your needs. You can search for partial matches of strings by using the wildcard-symbol *, see screenshot. | This tab allows you to search through the accounting log. Here you can specify and limit your search to your needs. You can search for partial matches of strings by using the wildcard-symbol *, see screenshot. | ||
- | In the first drop-down menu you can tell NAV what type of data you want to search for, default is username, but you can also search for an IP-address/ | + | In the first drop-down menu you can tell NAV what type of data you want to search for, default is username, but you can also search for an IP-address/ |
{{: | {{: | ||
Line 15: | Line 17: | ||
By clicking on one of the hostnames or IP-addresses that turn up in the search result you will start a new search based on that. Clicking on a session ID will transport you to the session-details page. | By clicking on one of the hostnames or IP-addresses that turn up in the search result you will start a new search based on that. Clicking on a session ID will transport you to the session-details page. | ||
- | ===== Charts ===== | + | ===== Accounting |
This tab shows a top ten table of the users who have generated the most traffic on the network in the chosen time period. You can choose to see top downloaders, | This tab shows a top ten table of the users who have generated the most traffic on the network in the chosen time period. You can choose to see top downloaders, | ||
Line 21: | Line 23: | ||
===== Error Log ===== | ===== Error Log ===== | ||
- | In this tab we can do searches through the messages in the freeradius error-log. You can do searches | + | In this tab we can do searches through the error-messages in the Freeradius logfile. You can do searches |
The results will show a timestamp of when an error occurred, the type of the error and the error-message itself. By clicking view you can see a more detailed message-summary. | The results will show a timestamp of when an error occurred, the type of the error and the error-message itself. By clicking view you can see a more detailed message-summary. | ||
Line 27: | Line 29: | ||
====== Installation and configuration ====== | ====== Installation and configuration ====== | ||
- | After you have finished the installation/ | + | After you have finished the installation/ |
- | {{:radius:radiusoverview.png|Overview of the radius-module}} | + | ===== NAS Configuration ===== |
+ | |||
+ | Your NAS (Network Access Server) needs to be configured to enable | ||
+ | < | ||
+ | aaa accounting dot1x default start-stop group radius | ||
+ | radius-server vsa send accounting | ||
+ | </ | ||
===== Files ===== | ===== Files ===== | ||
- | | + | {{: |
- | * radiuslib.py - Contains assorted helper-functions. | + | |
- | * radius_config.py - Just a config-file. | + | |
- | * radiusparser.py - Parses the Freeradius | + | * '' |
- | * postgresql.conf - Configuration file for the Freeradius postgresql-module. | + | * '' |
- | * Various .tmpl files - These are Cheetah-template files for the web-frontend, | + | * '' |
+ | * Various | ||
+ | * '' | ||
===== Files to edit ===== | ===== Files to edit ===== | ||
Line 45: | Line 55: | ||
< | < | ||
host = "" | host = "" | ||
- | user = "" | ||
passwd | passwd | ||
- | db_radiuslog_table = "" | ||
logfile = "" | logfile = "" | ||
+ | </ | ||
+ | |||
+ | === radiusd.conf === | ||
+ | This is a configuration file that you will find on your Freeradius-server. For details see the INSTALL document in the radius-directory. | ||
+ | |||
+ | You will probably want to change < | ||
+ | |||
+ | Add a line that says < | ||
+ | |||
+ | This small script needs to be defined in the '' | ||
+ | < | ||
+ | attr_rewrite modify_acctsessionid { | ||
+ | attribute = Acct-Session-Id | ||
+ | searchin = packet | ||
+ | searchfor = " | ||
+ | replacewith = "" | ||
+ | append = no | ||
+ | } | ||
</ | </ | ||
=== postgresql.conf === | === postgresql.conf === | ||
- | These are the modified accounting queries, which replaces the standard ones in '' | + | This is also a configuration file that you will find on your Freeradius-server. |
+ | Below you will find the modified accounting queries, which replaces the standard ones in '' | ||
< | < | ||
####################################################################### | ####################################################################### | ||
Line 133: | Line 160: | ||
</ | </ | ||
+ | |||
+ | ====== Known Issues ====== | ||
+ | |||
+ | We've had one report where the Freeradius-server crashes when it loses connection with the postgresql-database and can no longer push accounting-messages to it. The reason for this is currently unknown, but it seems to be connected with the '' |
radius.1214562028.txt.gz · Last modified: by kaiab