23
Procedimento de Configuração do Radius para OLT Cianet Objetivo Configurar o servidor Radius para autenticação de ONU Corecess Cianet, utilizando o pacote Freeradius-mysql com sistema operacional Linux Fedora 15. Material Utilizado 01 Computador (servidor Radius) 01 OLT Corecess com SCM 20G e placa LIM Epon (conf autenticação radius) 01 ONU Epon (equipamento que irá autenticar no radius) Configuração Freeradius-mysql Após instalação do pacote freeradius-mysql e suas dependências, é necessário alterar alguns arquivos de configuração do radius. Os mesmos estão localizados no diretório etc/raddb/, onde os arquivos alterados são os seguintes: - radiusd.conf - clients.conf - sql.conf E no diretório onde ficam localizados os dicionários do radius, será necessário criar o dicionário Cianet e alterar o arquivo dictionary. Configuração Freeradius-mysql >> radiusd.conf Na edição desse arquivo, algumas linhas devem ser comentadas, algumas descomentadas e outras acrescentadas, onde segue abaixo as instruções: Linhas a serem comentadas: #user = radiusd #group = radiusd

Procedimento Radius Chassi 2700

Embed Size (px)

Citation preview

  • Procedimento de Configurao do Radius para OLT Cianet

    Objetivo

    Configurar o servidor Radius para autenticao de ONU Corecess Cianet,

    utilizando o pacote Freeradius-mysql com sistema operacional Linux Fedora

    15.

    Material Utilizado

    01 Computador (servidor Radius)

    01 OLT Corecess com SCM 20G e placa LIM Epon (conf autenticao radius)

    01 ONU Epon (equipamento que ir autenticar no radius)

    Configurao Freeradius-mysql

    Aps instalao do pacote freeradius-mysql e suas dependncias, necessrio

    alterar alguns arquivos de configurao do radius. Os mesmos esto

    localizados no diretrio etc/raddb/, onde os arquivos alterados so os

    seguintes:

    - radiusd.conf

    - clients.conf

    - sql.conf

    E no diretrio onde ficam localizados os dicionrios do radius, ser necessrio

    criar o dicionrio Cianet e alterar o arquivo dictionary.

    Configurao Freeradius-mysql >> radiusd.conf

    Na edio desse arquivo, algumas linhas devem ser comentadas, algumas

    descomentadas e outras acrescentadas, onde segue abaixo as instrues:

    Linhas a serem comentadas:

    #user = radiusd

    #group = radiusd

  • Linhas a serem descomentadas:

    $INCLUDE sql.conf

    Linhas a serem acrescentadas:

    authorize{

    preprocess

    auth_log

    chap

    pap

    eap

    files

    sql

    }

    authenticate{

    pap

    eap

    chap

    }

    As linhas acima, devem ser includas acima da linha abaixo do arquivo de

    configurao:

    # SECURITY CONFIGURATION

    Configurao Freeradius-mysql >> clients.conf

    Na edio desse arquivo algumas linhas devem ser acrescentadas de acordo

    com o endereamento IP da OLT que ir enviar a solicitao ou requisio

    para o Radius, conforme o modelo que segue abaixo:

  • client {

    secret = 01234567

    nastype = other

    #shortname = cianethpnav3 (esta linha opcional)

    }

    Configurao Freeradius-mysql >> sql.conf

    Segue abaixo algumas linhas do arquivo de configurao para ser alterado de acordo

    com a configurao do mysql server e banco de dados criado para o Radius.

    # Connection info:

    server = "localhost" (se o mysql server estiver sendo executado na mesma mquina que o radius)

    #port = 3306

    login = "radius" (usurio criado no mysql com privilegios concedidos para o banco do radius)

    password = "radius" (senha do usurio criado no mysql para o banco do radius)

    radius_db = "radius_cianet" (nome do banco de dados do Radius, criado no mysql)

    Dicionrio Radius Cianet

    Por padro os dicionrios do Radius ficam localizados em /usr/share/freeradius/dictionary/,

    portanto neste local ser inserido o dicionrio da Cianet e alterado o arquivo dictionary,

    conforme descrito abaixo:

    Nome do arquivo a ser criado (dicionrio Cianet): dictionary.cianet.02032012_4_23

    Contedo do arquivo dictionary.cianet.02032012_4_23:

    #VENDOR cianet 8213

    VENDOR cianet 1726

    BEGIN-VENDOR cianet

    ATTRIBUTE mac-limit 50 integer

    ATTRIBUTE vid 51 integer

    ATTRIBUTE uplink-min-bandwidth 52 integer

  • ATTRIBUTE uplink-max-bandwidth 53 integer

    ATTRIBUTE downlink-min-bandwidth 54 integer

    ATTRIBUTE downlink-max-bandwidth 55 integer

    ATTRIBUTE dscp 77 integer

    ATTRIBUTE first-uplink-min-bandwidth 130 integer

    ATTRIBUTE first-uplink-max-bandwidth 131 integer

    ATTRIBUTE second-uplink-min-bandwidth 132 integer

    ATTRIBUTE second-uplink-max-bandwidth 133 integer

    ATTRIBUTE third-uplink-min-bandwidth 134 integer

    ATTRIBUTE third-uplink-max-bandwidth 135 integer

    ATTRIBUTE fourth-uplink-min-bandwidth 136 integer

    ATTRIBUTE fourth-uplink-max-bandwidth 137 integer

    ATTRIBUTE first-downlink-min-bandwidth 138 integer

    ATTRIBUTE first-downlink-max-bandwidth 139 integer

    ATTRIBUTE second-downlink-min-bandwidth 140 integer

    ATTRIBUTE second-downlink-max-bandwidth 141 integer

    ATTRIBUTE third-downlink-min-bandwidth 142 integer

    ATTRIBUTE third-downlink-max-bandwidth 143 integer

    ATTRIBUTE fourth-downlink-min-bandwidth 144 integer

    ATTRIBUTE fourth-downlink-max-bandwidth 145 integer

  • ATTRIBUTE first-link-bridge 146 string

    ATTRIBUTE second-link-bridge 147 string

    ATTRIBUTE third-link-bridge 148 string

    ATTRIBUTE fourth-link-bridge 149 string

    ATTRIBUTE first-link-vid 150 integer

    ATTRIBUTE second-link-vid 151 integer

    ATTRIBUTE third-link-vid 152 integer

    ATTRIBUTE fourth-link-vid 153 integer

    ATTRIBUTE first-link-token 154 integer

    ATTRIBUTE second-link-token 155 integer

    ATTRIBUTE third-link-token 156 integer

    ATTRIBUTE fourth-link-token 157 integer

    END-VENDOR cianet

    Como mencionado necessrio alterar o arquivo dictionary, conforme abaixo:

    Deve-se inserir a seguinte linha neste arquivo:

    $INCLUDE dictionary.cianet.02032012_4_23

    recomendado seguir a ordem alfabtica dos dicionrios includos.

  • Configurao Mysql-Server DB Radius Cianet

    Aps instalar o mysql-server, pode-se acessar o mesmo para criar o banco de dados que ser

    usado pelo Radius, criar o usurio que ir conectar-se ao banco, concedendo privilgios ao

    mesmo para o banco de Radius e importar o modelo do banco que ser fornecido abaixo:

    Criar o banco para o Radius - Entrar no mysql #mysql> create database radius_cianet; - Importar o modelo da base de dados do Radius # mysql -u root -p radius_cianet < radius_cianet

    Nesse exemplo o radius_cianet o modelo do banco de dados do Radius e

    est nodiretrio corrente da execuo do comando.

    Conteudo do arquivo sql radis_cianet.sql:

    -- phpMyAdmin SQL Dump

    -- version 3.5.1

    -- http://www.phpmyadmin.net

    --

    -- Host: localhost

    -- Generation Time: Oct 09, 2012 at 02:00 PM

    -- Server version: 5.5.23

    -- PHP Version: 5.3.13

    SET SQL_MODE="NO_AUTO_VALUE_ON_ZERO";

    SET time_zone = "+00:00";

    /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;

    /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;

    /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;

    /*!40101 SET NAMES utf8 */;

  • --

    -- Database: `radius_cianet`

    --

    -- --------------------------------------------------------

    --

    -- Table structure for table `badusers`

    --

    CREATE TABLE IF NOT EXISTS `badusers` (

    `id` int(10) NOT NULL AUTO_INCREMENT,

    `UserName` varchar(30) DEFAULT NULL,

    `IncidentDate` datetime NOT NULL DEFAULT '0000-00-00 00:00:00',

    `Reason` varchar(200) DEFAULT NULL,

    `Admin` varchar(30) DEFAULT '-',

    PRIMARY KEY (`id`),

    KEY `UserName` (`UserName`),

    KEY `IncidentDate` (`IncidentDate`)

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

    -- --------------------------------------------------------

    --

    -- Table structure for table `cui`

    --

    CREATE TABLE IF NOT EXISTS `cui` (

    `clientipaddress` varchar(15) NOT NULL DEFAULT '',

  • `callingstationid` varchar(50) NOT NULL DEFAULT '',

    `username` varchar(64) NOT NULL DEFAULT '',

    `cui` varchar(32) NOT NULL DEFAULT '',

    `creationdate` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,

    `lastaccounting` timestamp NOT NULL DEFAULT '0000-00-00 00:00:00',

    PRIMARY KEY (`username`,`clientipaddress`,`callingstationid`)

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1;

    -- --------------------------------------------------------

    --

    -- Table structure for table `mtotacct`

    --

    CREATE TABLE IF NOT EXISTS `mtotacct` (

    `MTotAcctId` bigint(21) NOT NULL AUTO_INCREMENT,

    `UserName` varchar(64) NOT NULL DEFAULT '',

    `AcctDate` date NOT NULL DEFAULT '0000-00-00',

    `ConnNum` bigint(12) DEFAULT NULL,

    `ConnTotDuration` bigint(12) DEFAULT NULL,

    `ConnMaxDuration` bigint(12) DEFAULT NULL,

    `ConnMinDuration` bigint(12) DEFAULT NULL,

    `InputOctets` bigint(12) DEFAULT NULL,

    `OutputOctets` bigint(12) DEFAULT NULL,

    `NASIPAddress` varchar(15) DEFAULT NULL,

    PRIMARY KEY (`MTotAcctId`),

    KEY `UserName` (`UserName`),

    KEY `AcctDate` (`AcctDate`),

    KEY `UserOnDate` (`UserName`,`AcctDate`),

    KEY `NASIPAddress` (`NASIPAddress`)

  • ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

    -- --------------------------------------------------------

    --

    -- Table structure for table `nas`

    --

    CREATE TABLE IF NOT EXISTS `nas` (

    `id` int(10) NOT NULL AUTO_INCREMENT,

    `nasname` varchar(128) NOT NULL,

    `shortname` varchar(32) DEFAULT NULL,

    `type` varchar(30) DEFAULT 'other',

    `ports` int(5) DEFAULT NULL,

    `secret` varchar(60) NOT NULL DEFAULT 'secret',

    `server` varchar(64) DEFAULT NULL,

    `community` varchar(50) DEFAULT NULL,

    `description` varchar(200) DEFAULT 'RADIUS Client',

    PRIMARY KEY (`id`),

    KEY `nasname` (`nasname`)

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=4 ;

    --

    -- Dumping data for table `nas`

    --

    INSERT INTO `nas` (`id`, `nasname`, `shortname`, `type`, `ports`, `secret`, `server`,

    `community`, `description`) VALUES

    (2, 'mikrotik.com.br', 'mikrotik', 'other', 1812, 'radius', NULL, 'public', 'mikrotik'),

    (3, 'corecess', 'corecess', 'other', 1812, 'corecess', NULL, '', 'corecess');

  • -- --------------------------------------------------------

    --

    -- Table structure for table `radacct`

    --

    CREATE TABLE IF NOT EXISTS `radacct` (

    `radacctid` bigint(21) NOT NULL AUTO_INCREMENT,

    `acctsessionid` varchar(64) NOT NULL DEFAULT '',

    `acctuniqueid` varchar(32) NOT NULL DEFAULT '',

    `username` varchar(64) NOT NULL DEFAULT '',

    `groupname` varchar(64) NOT NULL DEFAULT '',

    `realm` varchar(64) DEFAULT '',

    `nasipaddress` varchar(15) NOT NULL DEFAULT '',

    `nasportid` varchar(15) DEFAULT NULL,

    `nasporttype` varchar(32) DEFAULT NULL,

    `acctstarttime` datetime DEFAULT NULL,

    `acctstoptime` datetime DEFAULT NULL,

    `acctsessiontime` int(12) DEFAULT NULL,

    `acctauthentic` varchar(32) DEFAULT NULL,

    `connectinfo_start` varchar(50) DEFAULT NULL,

    `connectinfo_stop` varchar(50) DEFAULT NULL,

    `acctinputoctets` bigint(20) DEFAULT NULL,

    `acctoutputoctets` bigint(20) DEFAULT NULL,

    `calledstationid` varchar(50) NOT NULL DEFAULT '',

    `callingstationid` varchar(50) NOT NULL DEFAULT '',

    `acctterminatecause` varchar(32) NOT NULL DEFAULT '',

    `servicetype` varchar(32) DEFAULT NULL,

    `framedprotocol` varchar(32) DEFAULT NULL,

  • `framedipaddress` varchar(15) NOT NULL DEFAULT '',

    `acctstartdelay` int(12) DEFAULT NULL,

    `acctstopdelay` int(12) DEFAULT NULL,

    `xascendsessionsvrkey` varchar(10) DEFAULT NULL,

    PRIMARY KEY (`radacctid`),

    KEY `username` (`username`),

    KEY `framedipaddress` (`framedipaddress`),

    KEY `acctsessionid` (`acctsessionid`),

    KEY `acctsessiontime` (`acctsessiontime`),

    KEY `acctuniqueid` (`acctuniqueid`),

    KEY `acctstarttime` (`acctstarttime`),

    KEY `acctstoptime` (`acctstoptime`),

    KEY `nasipaddress` (`nasipaddress`)

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

    -- --------------------------------------------------------

    --

    -- Table structure for table `radcheck`

    --

    CREATE TABLE IF NOT EXISTS `radcheck` (

    `id` int(11) unsigned NOT NULL AUTO_INCREMENT,

    `username` varchar(64) NOT NULL DEFAULT '',

    `attribute` varchar(64) NOT NULL DEFAULT '',

    `op` char(2) NOT NULL DEFAULT '==',

    `value` varchar(253) NOT NULL DEFAULT '',

    PRIMARY KEY (`id`),

    KEY `username` (`username`(32))

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=6 ;

  • --

    -- Dumping data for table `radcheck`

    --

    INSERT INTO `radcheck` (`id`, `username`, `attribute`, `op`, `value`) VALUES

    (5, '@cianethpnav3', 'Cleartext-Password', ':=', ''),

    (4, '@cianethpnav3', 'Cleartext-Password', ':=', '');

    -- --------------------------------------------------------

    --

    -- Table structure for table `radgroupcheck`

    --

    CREATE TABLE IF NOT EXISTS `radgroupcheck` (

    `id` int(11) unsigned NOT NULL AUTO_INCREMENT,

    `groupname` varchar(64) NOT NULL DEFAULT '',

    `attribute` varchar(64) NOT NULL DEFAULT '',

    `op` char(2) NOT NULL DEFAULT '==',

    `value` varchar(253) NOT NULL DEFAULT '',

    PRIMARY KEY (`id`),

    KEY `groupname` (`groupname`(32))

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

    -- --------------------------------------------------------

    --

    -- Table structure for table `radgroupreply`

    --

  • CREATE TABLE IF NOT EXISTS `radgroupreply` (

    `id` int(11) unsigned NOT NULL AUTO_INCREMENT,

    `groupname` varchar(64) NOT NULL DEFAULT '',

    `attribute` varchar(64) NOT NULL DEFAULT '',

    `op` char(2) NOT NULL DEFAULT '=',

    `value` varchar(253) NOT NULL DEFAULT '',

    PRIMARY KEY (`id`),

    KEY `groupname` (`groupname`(32))

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

    -- --------------------------------------------------------

    --

    -- Table structure for table `radippool`

    --

    CREATE TABLE IF NOT EXISTS `radippool` (

    `id` int(11) unsigned NOT NULL AUTO_INCREMENT,

    `pool_name` varchar(30) NOT NULL,

    `framedipaddress` varchar(15) NOT NULL DEFAULT '',

    `nasipaddress` varchar(15) NOT NULL DEFAULT '',

    `calledstationid` varchar(30) NOT NULL,

    `callingstationid` varchar(30) NOT NULL,

    `expiry_time` datetime DEFAULT NULL,

    `username` varchar(64) NOT NULL DEFAULT '',

    `pool_key` varchar(30) NOT NULL,

    PRIMARY KEY (`id`),

    KEY `radippool_poolname_expire` (`pool_name`,`expiry_time`),

    KEY `framedipaddress` (`framedipaddress`),

  • KEY `radippool_nasip_poolkey_ipaddress` (`nasipaddress`,`pool_key`,`framedipaddress`)

    ) ENGINE=InnoDB DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

    -- --------------------------------------------------------

    --

    -- Table structure for table `radpostauth`

    --

    CREATE TABLE IF NOT EXISTS `radpostauth` (

    `id` int(11) NOT NULL AUTO_INCREMENT,

    `username` varchar(64) NOT NULL DEFAULT '',

    `pass` varchar(64) NOT NULL DEFAULT '',

    `reply` varchar(32) NOT NULL DEFAULT '',

    `authdate` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE

    CURRENT_TIMESTAMP,

    PRIMARY KEY (`id`)

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

    -- --------------------------------------------------------

    --

    -- Table structure for table `radreply`

    --

    CREATE TABLE IF NOT EXISTS `radreply` (

    `id` int(11) unsigned NOT NULL AUTO_INCREMENT,

    `username` varchar(64) NOT NULL DEFAULT '',

    `attribute` varchar(64) NOT NULL DEFAULT '',

    `op` char(2) NOT NULL DEFAULT '=',

  • `value` varchar(253) NOT NULL DEFAULT '',

    PRIMARY KEY (`id`),

    KEY `username` (`username`(32))

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=112 ;

    --

    -- Dumping data for table `radreply`

    --

    INSERT INTO `radreply` (`id`, `username`, `attribute`, `op`, `value`) VALUES

    (73, '@cianethpnav3', 'first-link-vid', '==', '1'),

    (74, '@cianethpnav3', 'second-link-vid', '==', '1'),

    (75, '@cianethpnav3', 'third-link-vid', '==', ''),

    (76, '@cianethpnav3', 'fourth-link-vid', '==', ''),

    (77, '@cianethpnav3', 'first-link-token', '==', ''),

    (78, '@cianethpnav3', 'second-link-token', '==', ''),

    (79, '@cianethpnav3', 'third-link-token', '==', ''),

    (80, '@cianethpnav3', 'fourth-link-token', '==', ''),

    (81, '@cianethpnav3', 'Tunnel-Type', '==', '13'),

    (82, '@cianethpnav3', 'Tunnel-Medium-Type', '==', '6'),

    (83, '@cianethpnav3', 'Tunnel-Private-Group-ID', '==', 'vlan10'),

    (72, '@cianethpnav3', 'fourth-link-bridge', '==', 'share'),

    (71, '@cianethpnav3', 'third-link-bridge', '==', 'share'),

    (70, '@cianethpnav3', 'second-link-bridge', '==', 'share'),

    (69, '@cianethpnav3', 'first-link-bridge', '==', 'share'),

    (68, '@cianethpnav3', 'fourth-downlink-max-bandwidth', '==', '100'),

    (67, '@cianethpnav3', 'fourth-downlink-min-bandwidth', '==', '100'),

    (66, '@cianethpnav3', 'third-downlink-max-bandwidth', '==', '100'),

    (65, '@cianethpnav3', 'third-downlink-min-bandwidth', '==', '100'),

    (64, '@cianethpnav3', 'second-downlink-max-bandwidth', '==', '100'),

  • (63, '@cianethpnav3', 'second-downlink-min-bandwidth', '==', '100'),

    (62, '@cianethpnav3', 'first-downlink-max-bandwidth', '==', '100000'),

    (61, '@cianethpnav3', 'first-downlink-min-bandwidth', '==', '1'),

    (60, '@cianethpnav3', 'fourth-uplink-max-bandwidth', '==', '1'),

    (59, '@cianethpnav3', 'fourth-uplink-min-bandwidth', '==', '10'),

    (58, '@cianethpnav3', 'third-uplink-max-bandwidth', '==', '1'),

    (57, '@cianethpnav3', 'third-uplink-min-bandwidth', '==', '10'),

    (56, '@cianethpnav3', 'second-uplink-max-bandwidth', '==', '1'),

    (55, '@cianethpnav3', 'second-uplink-min-bandwidth', '==', '10'),

    (54, '@cianethpnav3', 'first-uplink-max-bandwidth', '==', '100000'),

    (53, '@cianethpnav3', 'first-uplink-min-bandwidth', '==', '1'),

    (52, '@cianethpnav3', 'Tunnel-Private-Group-ID', '==', 'vlan1'),

    (51, '@cianethpnav3', 'Tunnel-Medium-Type', '==', '6'),

    (50, '@cianethpnav3', 'Tunnel-Type', '==', '13'),

    (84, '@cianethpnav3', 'first-uplink-min-bandwidth', '==', '1'),

    (85, '@cianethpnav3', 'first-uplink-max-bandwidth', '==', '100000'),

    (86, '@cianethpnav3', 'second-uplink-min-bandwidth', '==', '10'),

    (87, '@cianethpnav3', 'second-uplink-max-bandwidth', '==', '1'),

    (88, '@cianethpnav3', 'third-uplink-min-bandwidth', '==', '10'),

    (89, '@cianethpnav3', 'third-uplink-max-bandwidth', '==', '1'),

    (90, '@cianethpnav3', 'fourth-uplink-min-bandwidth', '==', '10'),

    (91, '@cianethpnav3', 'fourth-uplink-max-bandwidth', '==', '1'),

    (92, '@cianethpnav3', 'first-downlink-min-bandwidth', '==', '1'),

    (93, '@cianethpnav3', 'first-downlink-max-bandwidth', '==', '100000'),

    (94, '@cianethpnav3', 'second-downlink-min-bandwidth', '==', '100'),

    (95, '@cianethpnav3', 'second-downlink-max-bandwidth', '==', '100'),

    (96, '@cianethpnav3', 'third-downlink-min-bandwidth', '==', '100'),

    (97, '@cianethpnav3', 'third-downlink-max-bandwidth', '==', '100'),

    (98, '@cianethpnav3', 'fourth-downlink-min-bandwidth', '==', '100'),

    (99, '@cianethpnav3', 'fourth-downlink-max-bandwidth', '==', '100'),

  • (100, '@cianethpnav3', 'first-link-bridge', '==', 'share'),

    (101, '@cianethpnav3', 'second-link-bridge', '==', 'share'),

    (102, '@cianethpnav3', 'third-link-bridge', '==', 'share'),

    (103, '@cianethpnav3', 'fourth-link-bridge', '==', 'share'),

    (104, '@cianethpnav3', 'first-link-vid', '==', '5'),

    (105, '@cianethpnav3', 'second-link-vid', '==', '10'),

    (106, '@cianethpnav3', 'third-link-vid', '==', ''),

    (107, '@cianethpnav3', 'fourth-link-vid', '==', ''),

    (108, '@cianethpnav3', 'first-link-token', '==', ''),

    (109, '@cianethpnav3', 'second-link-token', '==', ''),

    (110, '@cianethpnav3', 'third-link-token', '==', ''),

    (111, '@cianethpnav3', 'fourth-link-token', '==', '');

    -- --------------------------------------------------------

    --

    -- Table structure for table `radusergroup`

    --

    CREATE TABLE IF NOT EXISTS `radusergroup` (

    `username` varchar(64) NOT NULL DEFAULT '',

    `groupname` varchar(64) NOT NULL DEFAULT '',

    `priority` int(11) NOT NULL DEFAULT '1',

    KEY `username` (`username`(32))

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1;

    -- --------------------------------------------------------

    --

    -- Table structure for table `totacct`

  • --

    CREATE TABLE IF NOT EXISTS `totacct` (

    `TotAcctId` bigint(21) NOT NULL AUTO_INCREMENT,

    `UserName` varchar(64) NOT NULL DEFAULT '',

    `AcctDate` date NOT NULL DEFAULT '0000-00-00',

    `ConnNum` bigint(12) DEFAULT NULL,

    `ConnTotDuration` bigint(12) DEFAULT NULL,

    `ConnMaxDuration` bigint(12) DEFAULT NULL,

    `ConnMinDuration` bigint(12) DEFAULT NULL,

    `InputOctets` bigint(12) DEFAULT NULL,

    `OutputOctets` bigint(12) DEFAULT NULL,

    `NASIPAddress` varchar(15) DEFAULT NULL,

    PRIMARY KEY (`TotAcctId`),

    KEY `UserName` (`UserName`),

    KEY `AcctDate` (`AcctDate`),

    KEY `UserOnDate` (`UserName`,`AcctDate`),

    KEY `NASIPAddress` (`NASIPAddress`),

    KEY `NASIPAddressOnDate` (`AcctDate`,`NASIPAddress`)

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

    -- --------------------------------------------------------

    --

    -- Table structure for table `userinfo`

    --

    CREATE TABLE IF NOT EXISTS `userinfo` (

    `id` int(10) NOT NULL DEFAULT '0',

    `UserName` varchar(30) DEFAULT NULL,

  • `Name` varchar(200) DEFAULT NULL,

    `Mail` varchar(200) DEFAULT NULL,

    `Department` varchar(200) DEFAULT NULL,

    `WorkPhone` varchar(200) DEFAULT NULL,

    `HomePhone` varchar(200) DEFAULT NULL,

    `Mobile` varchar(200) DEFAULT NULL,

    PRIMARY KEY (`id`),

    KEY `UserName` (`UserName`),

    KEY `Department` (`Department`)

    ) ENGINE=MyISAM DEFAULT CHARSET=latin1;

    --

    -- Dumping data for table `userinfo`

    --

    INSERT INTO `userinfo` (`id`, `UserName`, `Name`, `Mail`, `Department`, `WorkPhone`,

    `HomePhone`, `Mobile`) VALUES

    (0, 'cianet', 'cianet', '', '', '', '', '');

    /*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;

    /*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;

    /*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;

  • Inserir os dados de autenticao e perfil de plano da ONU

    Segue abaixo o modelo de arquivo para incluso no mysql server.

    Entrar no mysql Escolher o naco de dados do Radius (nesse exemplo o radius_cianet) #mysql> use radius_cianet

    Criado usurio com MAC 00:90:a3:54:99:74 and password 3548437633

    Inserir os comandos abaixo no cli do mysql:

    insert into radcheck (username,attribute,op,value) values

    ('0090a3549974@cianethpnav3','Cleartext-Password',':=','3548437633');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','Tunnel-Type','13');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','Tunnel-Medium-Type','6');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','Tunnel-Private-Group-ID','vlan10');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','first-uplink-min-bandwidth','1');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','first-uplink-max-bandwidth','100000');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','second-uplink-min-bandwidth','10');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','second-uplink-max-bandwidth','1');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','third-uplink-min-bandwidth','10');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','third-uplink-max-bandwidth','1');

    insert into radreply (username,op,attribute,value) values

  • ('0090a3549974@cianethpnav3','==','fourth-uplink-min-bandwidth','10');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','fourth-uplink-max-bandwidth','1');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','first-downlink-min-bandwidth','1');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','first-downlink-max-bandwidth','100000');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','second-downlink-min-bandwidth','100');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','second-downlink-max-bandwidth','100');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','third-downlink-min-bandwidth','100');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','third-downlink-max-bandwidth','100');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','fourth-downlink-min-bandwidth','100');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','fourth-downlink-max-bandwidth','100');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','first-link-bridge','share');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','second-link-bridge','share');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','third-link-bridge','share');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','fourth-link-bridge','share');

  • insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','first-link-vid','5');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','second-link-vid','10');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','third-link-vid','');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','fourth-link-vid','');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','first-link-token','');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','second-link-token','');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','third-link-token','');

    insert into radreply (username,op,attribute,value) values

    ('0090a3549974@cianethpnav3','==','fourth-link-token','');

  • Configurao Mysql-Server DB Radius Cianet

    Segue abaixo imagem do debug do servidor Radius logo aps a autenticao de uma ONU

    neste servidor.

    Thiago Roberto Mendes

    48 2106.0121

    [email protected]