Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Freeradius 3.0 on Pfsense 2.3.4 problems

    Scheduled Pinned Locked Moved General pfSense Questions
    21 Posts 5 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GrimsonG
      Grimson Banned @johnpoz
      last edited by

      @johnpoz said in Freeradius 3.0 on Pfsense 2.3.4 problems:

      2.3.x is no longer support and is DEAD...

      And if your Box is 32-bit only it's DEAD as well.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Mmm, from another post : "I forgot to mention that the box is running Pfsense ver 2.3.4 I386."

        It's possible that's running 32bit on 64bit hardware but....

        If it's 32bit hardware you can only upgrade to 2.3.5, which you should be being offered even for Nano.
        But that's time to upgrade!

        Steve

        1 Reply Last reply Reply Quote 0
        • C
          cenriq
          last edited by

          OK I understand the need to upgrade. IIRC the board has some SATA ports. I can probably put in a hard disk, but its still 32 bits.
          But back to the original problem. Do you think it's related to my hardware?

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz

            Doesn't matter if your hardware was never used out of the box. If your 32 bit, its time for new hardware.. Running a firewall that is years out of date is pointless!!

            Almost 2 years ago was when you should of been planning your upgrade strategy... Which is when they announced the end of 32 bit support..

            Here is what I would do - order some new hardware today! You could prob get a sg1100 or 3100 in a few days ;) Or something bigger maybe..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              What is the hardware you have? It is possible it's 64bit and you just have a 32bit install.

              Steve

              1 Reply Last reply Reply Quote 0
              • C
                cenriq
                last edited by

                Here is processor on the board I am using:

                CPU Type Intel(R) Celeron(R) CPU 1037U @ 1.80GHz
                2 CPUs: 1 package(s) x 2 core(s)

                From my research it is 64 bits, so I may be lucky. I'll upgrade soon. What's the minimum size SSD I should get?

                Could my original problem be hardware related?

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Well what size CF did you have? Clearly you were not running packages that used up space like Proxy or ntop or IPS or pfblocker?

                  You could get pretty much smallest there is like 16GB would be huge amount of space unless you plan on running some HUGE cache for proxy, etc. Or lots of logging with ntop, etc. etc.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    You can probably just do a full 64bit install to the CF card and it will be fine for years as long as you remove the SWAP partition and move /var and /tmp to RAM after the install.

                    Given that you almost certainly can run 64bit it's pointless trying to diagnose the initial issue until you're running 2.4.4p2.

                    Steve

                    1 Reply Last reply Reply Quote 0
                    • C
                      cenriq
                      last edited by

                      Thanks for the responses. I will be doing the re-install later today/tonight and get back to you tomorrow. I'll try to find the appropriate install instructions to implement the upgrade/re-install.

                      1 Reply Last reply Reply Quote 0
                      • C
                        cenriq
                        last edited by

                        Ok guys I have upgraded to the lastest of Pfsense, so my router is now running 2.4.4-RELEASE-p2 (amd64).

                        I had done a backup from the old version and restored it to the new version. Since the upgrade I have an additional problem. The PPPoE client that used to connect normally is now connecting and disconnecting every 1 minutes. I had to change the IP address under Freeradius/NAS/Clients to "*" for it to give the behavior it is now doing. If I put the IP address of the PPPoE server in there it does not work, and get a message in System Log, something about "Unknown Client". In the previous version I had the IP address of the PPPoE server. Maybe now I need to put in additional config for it to stay connected?

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          I think we'll need to see some screenshots of you config to diagnose that.

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • C
                            cenriq
                            last edited by

                            Screen shots of what part of the config?

                            I have figured out that this problem has to do with Freeradius I noted that if I disable the use of freeradius for authentication my connection to the PPPoE server stays up.

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Ok well check the logs. It might show why it's disconnecting after a minute.

                              Otherwise we'll need as much detail as possible here. The PPPoE config and freeradius config at least I would think.

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • C
                                cenriq
                                last edited by

                                Here are the screenshots of the Freeradius config and PPPoE server. I had disabled Radius authentication to let PPPoE work.

                                2_1550849753444_Screenshot (11).png 1_1550849753444_Screenshot (10).png 0_1550849753414_Screenshot (9).png

                                1 Reply Last reply Reply Quote 0
                                • GertjanG
                                  Gertjan
                                  last edited by Gertjan

                                  To see any possible FreeRadius issue :
                                  Stop FreeRadius in the GUI.
                                  Enter console - option 8.
                                  Start FreeRadius by hand using debug mode.

                                  radiusd -X
                                  

                                  (that is a capital X)

                                  Note :
                                  To eliminate possible future troubles :
                                  0_1550850671446_609ab78f-84c2-40ec-a8fa-c1fcf9ab9b49-image.png
                                  Don't use the 8000 port range.

                                  No "help me" PM's please. Use the forum, the community will thank you.
                                  Edit : and where are the logs ??

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    cenriq
                                    last edited by

                                    here is a sample of what I received when I ran radiusd -X from console:

                                    0_1550862869552_Screenshot (12).png

                                    I had re-enabled PPPoE server to use radius authentication.

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      cenriq
                                      last edited by

                                      That same error keeps looping every minute or so.

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.