Connecting to RADIUS Server
-
hi guys
i am new in Pfsense product.
i install Pfsense 2.4.4 and enable CP service. configure it to Authenticate and Accounting with my IBSng RADIUS server
which is listening on UDP port 1812,1813.
1- how can configure Pfsense to connect to these port for communication ?!
2- does any body know which of these ithem should i select for RAS type ?
-
Hi,
Question 1 : Visit System => User Manager => Authentication Servers and declare your external Radius server.
Question 2 : dono.
-
@Gertjan
thanks for your reply
Yes, i know pfsense has a option to determine port number, this option use UDP ro TCP port on destination server ? -
thanks
you were right, Pfsense use UDP port.
i solve my Issue by using windows NPS as a Radius Proxy. -
@soheil-amiri said in Connecting to RADIUS Server:
Yes, i know pfsense has a option to determine port number, this option use UDP ro TCP port on destination server ?
Check the Radius server manual ;)
A Radius server uses typically always an UDP port for authentication and authorization. -
@Gertjan
you are right
IBSng as a radius server Use 1812/1813 UDP for authenticate and accounting, but in my case is not working well.
i test Pfsense by windows server NAP server and it 's work well.
i must work on IBsng.
thanks -
IBSng support team ( Radius Service team) say that they support RFC 2866 and 2865 as a native option so any device that support these RFC can Connect to RADIUS server as generic RAS server.
does Pfsense support RFC 2866 and 2865 for connecting to RADIUS server ? -
@soheil-amiri said in Connecting to RADIUS Server:
IBSng support team ( Radius Service team) say that they support RFC 2866 and 2865 as a native option so any device that support these RFC can Connect to RADIUS server as generic RAS server.
does Pfsense support RFC 2866 and 2865 for connecting to RADIUS server ?yes, pfsense does support these two Request For Comments
-
@free4 said in Connecting to RADIUS Server:
yes, pfsense does support these two Request For Comments
thanks for your reply, i will update this post as soon as i get answer from RADIUS support team
-
IBsng support team says they support 2866 and 2865 on their software but need extra money for connecting their product to pfsense service.
i confused how they support these RFC but their product did not support Pfsense and microsoft product. -
@soheil-amiri said in Connecting to RADIUS Server:
IBsng
i confused how they support these RFC but their product did not support Pfsense and microsoft product.Yep, me too. I don't know IBsng so i can't help you, sorry.
Would yo have logs of IBsng?
Is there a reason why you are using this product? Why aren't you using FreeRADIUS like most people?
-
@free4 said in Connecting to RADIUS Server:
Is there a reason why you are using this product? Why aren't you using FreeRADIUS like most people?
in my country (IRAN) for logging purpose we should use IBsng ( the only solution the police accept for tracing bad user).
thanks for your reply. i will try FreeRADIUS. is any GUI for this software. i am not familiar with linux.
