Connecting to RADIUS Server

soheil.amiri · Nov 8, 2018, 7:50 AM

hi guys
i am new in Pfsense product.
i install Pfsense 2.4.4 and enable CP service. configure it to Authenticate and Accounting with my IBSng RADIUS server
which is listening on UDP port 1812,1813.
1- how can configure Pfsense to connect to these port for communication ?!

2- does any body know which of these ithem should i select for RAS type ?

Gertjan · Nov 8, 2018, 2:53 PM

Hi,

Question 1 : Visit System => User Manager => Authentication Servers and declare your external Radius server.

Question 2 : dono.

soheil.amiri · Nov 8, 2018, 8:45 PM

@Gertjan
thanks for your reply
Yes, i know pfsense has a option to determine port number, this option use UDP ro TCP port on destination server ?

soheil.amiri · Nov 8, 2018, 9:56 PM

thanks
you were right, Pfsense use UDP port.
i solve my Issue by using windows NPS as a Radius Proxy.

Gertjan · Nov 9, 2018, 3:35 AM

@soheil-amiri said in Connecting to RADIUS Server:

Yes, i know pfsense has a option to determine port number, this option use UDP ro TCP port on destination server ?

Check the Radius server manual ;)
A Radius server uses typically always an UDP port for authentication and authorization.

soheil.amiri · Nov 9, 2018, 12:34 PM

@Gertjan
you are right
IBSng as a radius server Use 1812/1813 UDP for authenticate and accounting, but in my case is not working well.
i test Pfsense by windows server NAP server and it 's work well.
i must work on IBsng.
thanks

soheil.amiri · Dec 2, 2018, 2:07 PM

IBSng support team ( Radius Service team) say that they support RFC 2866 and 2865 as a native option so any device that support these RFC can Connect to RADIUS server as generic RAS server.
does Pfsense support RFC 2866 and 2865 for connecting to RADIUS server ?

free4 · Dec 2, 2018, 2:08 PM

@soheil-amiri said in Connecting to RADIUS Server:

IBSng support team ( Radius Service team) say that they support RFC 2866 and 2865 as a native option so any device that support these RFC can Connect to RADIUS server as generic RAS server.
does Pfsense support RFC 2866 and 2865 for connecting to RADIUS server ?

yes, pfsense does support these two Request For Comments

soheil.amiri · Dec 4, 2018, 6:14 AM

@free4 said in Connecting to RADIUS Server:

yes, pfsense does support these two Request For Comments

thanks for your reply, i will update this post as soon as i get answer from RADIUS support team

soheil.amiri · Dec 25, 2018, 11:17 AM

IBsng support team says they support 2866 and 2865 on their software but need extra money for connecting their product to pfsense service.
i confused how they support these RFC but their product did not support Pfsense and microsoft product.

free4 · Dec 25, 2018, 11:46 AM

@soheil-amiri said in Connecting to RADIUS Server:

IBsng
i confused how they support these RFC but their product did not support Pfsense and microsoft product.

Yep, me too. I don't know IBsng so i can't help you, sorry.

Would yo have logs of IBsng?

Is there a reason why you are using this product? Why aren't you using FreeRADIUS like most people?

soheil.amiri · Dec 26, 2018, 4:44 AM

@free4 said in Connecting to RADIUS Server:

Is there a reason why you are using this product? Why aren't you using FreeRADIUS like most people?

in my country (IRAN) for logging purpose we should use IBsng ( the only solution the police accept for tracing bad user).
thanks for your reply. i will try FreeRADIUS. is any GUI for this software. i am not familiar with linux.