eap-radius.conf 3.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111
  1. eap-radius {
  2. # Send RADIUS accounting information to RADIUS servers.
  3. # accounting = no
  4. # Close the IKE_SA if there is a timeout during interim RADIUS accounting
  5. # updates.
  6. # accounting_close_on_timeout = yes
  7. # Interval in seconds for interim RADIUS accounting updates, if not
  8. # specified by the RADIUS server in the Access-Accept message.
  9. # accounting_interval = 0
  10. # If enabled, accounting is disabled unless an IKE_SA has at least one
  11. # virtual IP. Only for IKEv2, for IKEv1 a virtual IP is strictly necessary.
  12. # accounting_requires_vip = no
  13. # If enabled, adds the Class attributes received in Access-Accept message to
  14. # the RADIUS accounting messages.
  15. # accounting_send_class = no
  16. # Use class attributes in Access-Accept messages as group membership
  17. # information.
  18. # class_group = no
  19. # Closes all IKE_SAs if communication with the RADIUS server times out. If
  20. # it is not set only the current IKE_SA is closed.
  21. # close_all_on_timeout = no
  22. # Send EAP-Start instead of EAP-Identity to start RADIUS conversation.
  23. # eap_start = no
  24. # Use filter_id attribute as group membership information.
  25. # filter_id = no
  26. # Prefix to EAP-Identity, some AAA servers use a IMSI prefix to select the
  27. # EAP method.
  28. # id_prefix =
  29. # Whether to load the plugin. Can also be an integer to increase the
  30. # priority of this plugin.
  31. load = yes
  32. # NAS-Identifier to include in RADIUS messages.
  33. # nas_identifier = strongSwan
  34. # Port of RADIUS server (authentication).
  35. # port = 1812
  36. # Base to use for calculating exponential back off.
  37. # retransmit_base = 1.4
  38. # Timeout in seconds before sending first retransmit.
  39. # retransmit_timeout = 2.0
  40. # Number of times to retransmit a packet before giving up.
  41. # retransmit_tries = 4
  42. # Shared secret between RADIUS and NAS. If set, make sure to adjust the
  43. # permissions of the config file accordingly.
  44. # secret =
  45. # IP/Hostname of RADIUS server.
  46. # server =
  47. # Number of sockets (ports) to use, increase for high load.
  48. # sockets = 1
  49. # Whether to include the UDP port in the Called- and Calling-Station-Id
  50. # RADIUS attributes.
  51. # station_id_with_port = yes
  52. dae {
  53. # Enables support for the Dynamic Authorization Extension (RFC 5176).
  54. # enable = no
  55. # Address to listen for DAE messages from the RADIUS server.
  56. # listen = 0.0.0.0
  57. # Port to listen for DAE requests.
  58. # port = 3799
  59. # Shared secret used to verify/sign DAE messages. If set, make sure to
  60. # adjust the permissions of the config file accordingly.
  61. # secret =
  62. }
  63. forward {
  64. # RADIUS attributes to be forwarded from IKEv2 to RADIUS.
  65. # ike_to_radius =
  66. # Same as ike_to_radius but from RADIUS to IKEv2.
  67. # radius_to_ike =
  68. }
  69. # Section to specify multiple RADIUS servers.
  70. servers {
  71. }
  72. # Section to configure multiple XAuth authentication rounds via RADIUS.
  73. xauth {
  74. }
  75. }