Local authorization configuration for all subscribers [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
en:dpi:dpi_components:freeradius:local_auth [2025/12/18 07:39] elena.krasnobryzhen:dpi:dpi_components:freeradius:local_auth [2026/03/13 07:36] (current) elena.krasnobryzh
Line 6: Line 6:
  
 ===== FreeRADIUS configuration ===== ===== FreeRADIUS configuration =====
-  - **Disabling EAP.** within this build, disabling is not strictly required, but EAP may cause errors when enabling the ''radiusd'' unit, so it is recommended to disable itgo to the directory ''/etc/raddb/sites-available/default +  - **Disabling EAP.** Within this build, complete removal is not required, but EAP may cause errors when enabling the ''radiusd'' unit, so it should be disabledGo to the configuration files ''/etc/raddb/sites-available/default'' and ''/etc/raddb/sites-enabled/inner-tunnel''\\ Disable EAP in the following sections:<code bash>authorize {
-/etc/raddb/sites-enabled/inner-tunnel''\\ Disable EAP in the following sections:<code bash> +
-authorize {+
  #  eap {  #  eap {
 # ok = return # ok = return
Line 17: Line 15:
 post-proxy { post-proxy {
 #  eap  #  eap 
-</code>If necessary, also remove EAP files from the modules ''/etc/raddb/mods-available/eap'' and ''/etc/raddb/mods-enabled/eap''.+</code> Also, if necessary, remove the EAP file from the module ''/etc/raddb/mods-enabled/eap''.
   - **Client/NAS configuration.** clients here refer to RADIUS clients, in this case — fastPCRF.\\ If the FreeRADIUS server is deployed on the same node as fastPCRF, no additional configuration is required — it is enough to verify the default configuration in the file ''/etc/raddb/clients.conf''.\\ If a remote NAS needs to be defined, use the same file and add a client description, for example:<code bash>   - **Client/NAS configuration.** clients here refer to RADIUS clients, in this case — fastPCRF.\\ If the FreeRADIUS server is deployed on the same node as fastPCRF, no additional configuration is required — it is enough to verify the default configuration in the file ''/etc/raddb/clients.conf''.\\ If a remote NAS needs to be defined, use the same file and add a client description, for example:<code bash>
 client fastpcrf1 { client fastpcrf1 {