Toolpack:Configuring RADIUS authorization B - Revision history

Allyntree at 19:14, 10 December 2020

2020-12-10T19:14:32Z

Allyntree at 19:14, 10 December 2020

2020-12-10T19:14:22Z

Allyntree at 17:48, 1 September 2020

2020-09-01T17:48:05Z

Allyntree at 14:58, 1 May 2019

2019-05-01T14:58:28Z

Allyntree at 17:45, 11 December 2017

2017-12-11T17:45:25Z

Allyntree at 23:53, 24 November 2016

2016-11-24T23:53:44Z

Allyntree at 15:29, 8 December 2015

2015-12-08T15:29:08Z

Allyntree: /* Applies to version(s): v2.8. */

2014-10-20T18:05:44Z

Applies to version(s): v2.8.

Allyntree: New 2.8 article

2014-10-20T18:04:56Z

New 2.8 article

New page

=== '''''Applies to version(s): v2.8.''''' ===
{{DISPLAYTITLE:Configuring RADIUS Authorization }}

This article describes how to configure RADIUS authentication and authorization.

1- Click '''Routing script''' in the navigation panel.

[[Image:ConfigureRadius_0.png|border]]

2- '''Edit''' your main script

[[Image:ConfigureRadius_.png]]

3- Do the following operations in your script:

*'''At the top of the page'''
require 'radius_authorization'
*'''Following your main class definition'''
include RadiusAuthorization
*'''Add before filter in your main class'''
before_filter :method => :radius_authorization
*'''Optional: add the ''fill_authorization_attributes'' method'''
def fill_authorization_attributes(params, auth)
auth[:"User-Name"] = "bob"
...
end
*'''Optional: add the ''requires_radius_authorization?'' method to reduce the scope of the authorization:
def requires_radius_authorization?(params)
case params[:call][:called]
when /^123/
true
...
else
false
end
end
*'''Optional: add methods to handle the possible results of authorization: ''on_radius_authorization_accept'', ''on_radius_authorization_challenge'', ''on_radius_authorization_reject'' and ''on_radius_authorization_timeout'':'''
def on_radius_authorization_accept(params, auth)
log_trace :always, "Access-Accept: #{auth.inspect}"
end

def on_radius_authorization_challenge(params, auth)
log_trace :always, "Access-Challenge: #{auth.inspect}"
raise RoutingException, :call_rejected
end

def on_radius_authorization_reject(params, auth)
log_trace :always, "Access-Reject: #{auth.inspect}"
raise RoutingException, :call_rejected
end

def on_radius_authorization_timeout(params, auth)
log_trace :always, "Authorization Timeout"
raise RoutingException, :call_rejected
end

4- Click 'Save'

== Example ==
The following script configures RADIUS authorization with the default attributes (''User-Name'', ''Calling-Station-Id'' and ''Called-Station-Id''):
<pre>
require 'base_routing'
require 'radius_authorization' # <- Add this line here

class MyScript < BaseRouting
include RadiusAuthorization # <- Add this line here

before_filter :method => :radius_authorization # <- Add this line here

route_match :call_field_name => :called
route_match :call_field_name => :calling
route_match :call_field_name => :nap
route_remap :call_field_name => :called, :route_field_name => :remapped_called
route_remap :call_field_name => :calling, :route_field_name => :remapped_calling
route_remap :call_field_name => :nap, :route_field_name => :remapped_nap
end

@@routing = MyScript.new

def init_routes( routes )
@@routing.init routes
end

def route( call, nap_list )
@@routing.route call, nap_list
end
</pre>

== Advanced example ==
The following script configures RADIUS authorization with user-defined attributes, and prints attributes found in the Access-Accept message if it is received:
<pre>
require 'base_routing'
require 'radius_authorization' # <- Add this line here

class MyScript < BaseRouting
include RadiusAuthorization # <- Add this line here

before_filter :method => :radius_authorization # <- Add this line here

def fill_authorization_attributes(params, auth) # <- Add this line here
call = params[:call] # <- Add this line here
auth[:"User-Name"] = "bob" # <- Add this line here
auth[:"User-Password"] = "hello" # <- Add this line here
auth[:"Calling-Station-Id"] = call[:calling] # <- Add this line here
auth[:"Called-Station-Id"] = call[:called] # <- Add this line here
end # <- Add this line here

def on_radius_authorization_accept(params, auth) # <- Add this line here
log_trace :always, "Access-Accept: #{auth.inspect}" # <- Add this line here
end # <- Add this line here

route_match :call_field_name => :called
route_match :call_field_name => :calling
route_match :call_field_name => :nap
route_remap :call_field_name => :called, :route_field_name => :remapped_called
route_remap :call_field_name => :calling, :route_field_name => :remapped_calling
route_remap :call_field_name => :nap, :route_field_name => :remapped_nap
end

@@routing = MyScript.new

def init_routes( routes )
@@routing.init routes
end

def route( call, nap_list )
@@routing.route call, nap_list
end
</pre>

← Older revision		Revision as of 19:14, 10 December 2020
Line 1:		Line 1:
−	~~=== '''''Applies to version(s): 2.8, 2.9, 2.10, 3.0, 3.1, 3.2''''' ===~~
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}
	{\| class="wikitable"		{\| class="wikitable"

← Older revision		Revision as of 17:48, 1 September 2020
Line 1:		Line 1:
−	=== '''''Applies to version(s): v2.8, v2.9, v2.10, v3.0, v3.1''''' ===	+	=== '''''Applies to version(s): 2.8, 2.9, 2.10, 3.0, 3.1, 3.2''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

← Older revision		Revision as of 14:58, 1 May 2019
Line 1:		Line 1:
−	=== '''''Applies to version(s): v2.8, v2.9, v2.10, v3.0''''' ===	+	=== '''''Applies to version(s): v2.8, v2.9, v2.10, v3.0, v3.1''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

← Older revision		Revision as of 17:45, 11 December 2017
Line 1:		Line 1:
−	=== '''''Applies to version(s): v2.8, v2.9, v2.10''''' ===	+	=== '''''Applies to version(s): v2.8, v2.9, v2.10, v3.0''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

← Older revision		Revision as of 23:53, 24 November 2016
Line 1:		Line 1:
−	=== '''''Applies to version(s): v2.8, v2.9.''''' ===	+	=== '''''Applies to version(s): v2.8, v2.9, v2.10''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

@@ Line 1: / Line 1: @@
 === '''''Applies to version(s): 2.8, 2.9, 2.10, 3.0, 3.1, 3.2''''' ===
 {{DISPLAYTITLE:Configuring RADIUS Authorization }}
 This article describes how to configure RADIUS authentication and authorization.

← Older revision		Revision as of 15:29, 8 December 2015
Line 1:		Line 1:
−	=== '''''Applies to version(s): v2.8.''''' ===	+	=== '''''Applies to version(s): v2.8, v2.9.''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

@@ Line 6: / Line 6: @@
 - Click '''Routing script''' in the navigation panel.
-[[Image:ConfigureRadius_0.png|border]]
+[[Image:ConfigureRadiusAuthorization_0.png|border]]
 - '''Edit''' your main script
-[[Image:ConfigureRadius_.png]]
+[[Image:ConfigureRadiusAuthorization_1.png]]