2)Secondly,edit radiusd.conf,uncomment digest in Authenticate{},such as:
authenticate {
Auth-Type PAP {
pap
}
Auth-Type CHAP {
chap
}
Auth-Type MS-CHAP {
mschap
}
# If you have a Cisco SIP server authenticating against
# FreeRADIUS, uncomment the following line, and the 'digest'
# line in the 'authorize' section.
digest
......
}
you can see the reason why we need did like this from the comments
3)edit users file in the same directory:
DEFAULT Auth-Type := digest
Fall-Through = 1
......
4)insert some account data in mysql database,table radcheck:
id | UserName | Attribute | op | Value | |||
---|---|---|---|---|---|---|---|
1 | pank | User-Password | == | 1111 | |||
2 | vincent | User-Password | == | 2222 | |||
3 | 520601 | Password | == | 520601 | |||
4 | 512352 | Password | == | 512352 | |||
5 | 2471 | Password | == | 2471 | |||
6 | 512332 | User-Password | == | 512332 |
5)insert some attributes in radgroupreply like this:
id | GroupName | Attribute | op | Value | |||
---|---|---|---|---|---|---|---|
1 | user | Service-Type | == | Framed-User | |||
2 | user | Framed-Protocol | == | PPP | |||
3 | user | Framed-Compression | == | Van-Jacobsen-TCP-IP |
6)Now you can using your phone register to proxy 10.74.52.42,then it will proxy these register message to radius server 10.74.51.42 for authentication
No comments:
Post a Comment