radius
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
radius [2008/06/30 10:20] – kaiab | radius [2011/04/07 18:24] (current) – [Use cases] faltin | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | This page is a work in progress | + | ====== The Radius Accounting tool ====== |
- | ====== | + | {{: |
- | Radius is a NAV-tool that collects accounting-data from a [[http:// | + | ===== Use cases ===== |
+ | * If you have an [[http:// | ||
+ | * If you use IEEE 802.1X in your wired network and thus requires users to log in to get access, the NAV radius accounting tool can track these users as well. | ||
===== Accounting Log ===== | ===== Accounting Log ===== | ||
Line 15: | Line 17: | ||
By clicking on one of the hostnames or IP-addresses that turn up in the search result you will start a new search based on that. Clicking on a session ID will transport you to the session-details page. | By clicking on one of the hostnames or IP-addresses that turn up in the search result you will start a new search based on that. Clicking on a session ID will transport you to the session-details page. | ||
- | ===== Charts ===== | + | ===== Accounting |
This tab shows a top ten table of the users who have generated the most traffic on the network in the chosen time period. You can choose to see top downloaders, | This tab shows a top ten table of the users who have generated the most traffic on the network in the chosen time period. You can choose to see top downloaders, | ||
Line 21: | Line 23: | ||
===== Error Log ===== | ===== Error Log ===== | ||
- | In this tab we can do searches through the messages in the freeradius error-log. You can do searches | + | In this tab we can do searches through the error-messages in the Freeradius logfile. You can do searches |
The results will show a timestamp of when an error occurred, the type of the error and the error-message itself. By clicking view you can see a more detailed message-summary. | The results will show a timestamp of when an error occurred, the type of the error and the error-message itself. By clicking view you can see a more detailed message-summary. | ||
Line 27: | Line 29: | ||
====== Installation and configuration ====== | ====== Installation and configuration ====== | ||
- | After you have finished the installation/ | + | After you have finished the installation/ |
- | {{:radius:radiusoverview.png|Overview of the radius-module}} | + | ===== NAS Configuration ===== |
+ | |||
+ | Your NAS (Network Access Server) needs to be configured to enable | ||
+ | < | ||
+ | aaa accounting dot1x default start-stop group radius | ||
+ | radius-server vsa send accounting | ||
+ | </ | ||
===== Files ===== | ===== Files ===== | ||
- | | + | {{: |
- | * radiuslib.py - Contains assorted helper-functions. | + | |
- | * radius_config.py - Just another config-file. | + | |
- | * radiusparser.py - Parses the Freeradius | + | * '' |
- | * postgresql.conf - Configuration file for the Freeradius postgresql-module. | + | * '' |
- | * Various .tmpl files - These are Cheetah-template files for the web-frontend, | + | * '' |
+ | * Various | ||
+ | * '' | ||
===== Files to edit ===== | ===== Files to edit ===== | ||
Line 45: | Line 55: | ||
< | < | ||
host = "" | host = "" | ||
- | user = "" | ||
passwd | passwd | ||
- | db_radiuslog_table = "" | ||
logfile = "" | logfile = "" | ||
+ | </ | ||
+ | |||
+ | === radiusd.conf === | ||
+ | This is a configuration file that you will find on your Freeradius-server. For details see the INSTALL document in the radius-directory. | ||
+ | |||
+ | You will probably want to change < | ||
+ | |||
+ | Add a line that says < | ||
+ | |||
+ | This small script needs to be defined in the '' | ||
+ | < | ||
+ | attr_rewrite modify_acctsessionid { | ||
+ | attribute = Acct-Session-Id | ||
+ | searchin = packet | ||
+ | searchfor = " | ||
+ | replacewith = "" | ||
+ | append = no | ||
+ | } | ||
</ | </ | ||
=== postgresql.conf === | === postgresql.conf === | ||
- | These are the modified accounting queries, which replaces the standard ones in '' | + | This is also a configuration file that you will find on your Freeradius-server. |
+ | Below you will find the modified accounting queries, which replaces the standard ones in '' | ||
< | < | ||
####################################################################### | ####################################################################### | ||
Line 133: | Line 160: | ||
</ | </ | ||
+ | |||
+ | ====== Known Issues ====== | ||
+ | |||
+ | We've had one report where the Freeradius-server crashes when it loses connection with the postgresql-database and can no longer push accounting-messages to it. The reason for this is currently unknown, but it seems to be connected with the '' |
radius.1214821204.txt.gz · Last modified: by kaiab