Imagem Docker do FreeRADIUS aberto (RADIUS coringa)

Tutorial de referencia: https://blog.patrickbrandao.com/freeradius-guia-rapido/

Construir container

./build-proc.sh

Rodar container

IP do container: 10.177.177.20 Secret padrao: tulipa

./run-prod.sh

Testar autenticacao

radtest contato@intranet     123mudar 10.177.177.20:1812 0 tulipa
radtest patrick              123mudar 10.177.177.20:1812 0 tulipa

Entrar no container e acompanhar logs

# Entrar:
docker exec -it freeradius-open ash

# Acompanhar log:
tail -f /data/logs/radius.log 

Teste completo de autenticacao personalizado

# Padrao Huawei 1
# Autenticacao:
HWTS=$(date '+%s')
HWDTSTART=$(date "+%b %e %Y %T %Z")

(
    echo 'User-Name = "patrick"'
    echo 'User-Password = "123mudar"'
    echo 'NAS-Port = 3199577'
    echo 'NAS-IP-Address = 10.190.190.2'
    echo 'Service-Type = Framed-User'
    echo 'Framed-Protocol = PPP'
    echo 'Calling-Station-Id = "3c:67:8c:13:ab:cd"'
    echo 'NAS-Identifier = "ne40-bras01"'
    echo 'NAS-Port-Type = Ethernet'
    echo 'NAS-Port-Id = "slot=0;subslot=3;port=13;vlanid=601;"'
    echo 'Acct-Session-Id = "74AAAAAA"'
    echo 'Connect-Info = "1000000000"'
    echo "Huawei-Startup-Stamp = $HWTS"
    echo 'Huawei-IPHost-Addr = "255.255.255.255 3c:67:8c:13:ab:cd"'
    echo 'Huawei-Connect-ID = 0'
    echo 'Huawei-Version = "Huawei NE"'
    echo 'Huawei-Product-ID = "NE"'
    echo 'Huawei-Domain-Name = "ispname-domain-1"'
    echo 'Huawei-User-Mac = "3c:67:8c:13:ab:cd"'
) | radclient -4 -x 10.177.177.20:1812 auth 'tulipa'

# Inicio de contabilidade:
(
    echo 'User-Name = "patrick"'
    echo 'NAS-Port = 3199577'
    echo 'NAS-IP-Address = 10.190.190.2'
    echo 'Framed-IP-Address = 100.88.88.2'
    echo 'NAS-Identifier = "ne40-bras01"'
    echo 'Acct-Status-Type = Start'
    echo 'Acct-Delay-Time = 0'
    echo 'Acct-Session-Id = "74AAAAAA"'
    echo 'Acct-Authentic = RADIUS'
    echo "Event-Timestamp = \"$HWDTSTART\""
    echo 'NAS-Port-Type = Ethernet'
    echo 'Calling-Station-Id = "3c:67:8c:13:ab:cd"'
    echo 'NAS-Port-Id = "slot=0;subslot=3;port=13;vlanid=601;"'
    echo 'Framed-Interface-Id = 3c67:8c56:106:101'
    echo 'Framed-IPv6-Prefix = 2001:db8:beba:fada::/64'
    echo 'Service-Type = Framed-User'
    echo 'Framed-Protocol = PPP'
    echo 'Connect-Info = "1000000000"'
    echo 'Delegated-IPv6-Prefix = 2001:db8:beba:c0ca::/64'
    echo 'Idle-Timeout = 0'
    echo 'Session-Timeout = 0'
    echo 'Huawei-IPHost-Addr = "100.88.88.2 3c:67:8c:13:ab:cd"'
    echo 'Huawei-Priority = 15'
    echo 'Huawei-Connect-ID = 0'
    echo 'Huawei-Domain-Name = "ispname-domain-1"'
    echo 'Huawei-Accounting-Level = 0'
    echo 'Huawei-Up-Priority = 15'
    echo 'Huawei-Down-Priority = 15'
    echo 'Huawei-User-Mac = "3c:67:8c:13:ab:cd"'
    echo 'Huawei-Acct-Update-Address = 0'
) | radclient -4 -x 10.177.177.20:1813 acct 'tulipa'


# Pausa de 10 segundos
sleep 10

# Enviar um Interim-UPDATE:
HWDTINTERIM=$(date "+%b %e %Y %T %Z")
(
    echo 'User-Name = "patrick"'
    echo 'NAS-Port = 3199577'
    echo 'NAS-IP-Address = 10.190.190.2'
    echo 'Framed-IP-Address = 100.88.88.2'
    echo 'NAS-Identifier = "ne40-bras01"'
    echo 'Acct-Status-Type = Interim-Update'
    echo 'Acct-Delay-Time = 0'
    echo 'Acct-Input-Octets = 0'
    echo 'Acct-Output-Octets = 0'
    echo 'Acct-Session-Id = "74AAAAAA"'
    echo 'Acct-Authentic = RADIUS'
    echo 'Acct-Session-Time = 600'
    echo 'Acct-Input-Packets = 0'
    echo 'Acct-Output-Packets = 0'
    echo 'Acct-Input-Gigawords = 0'
    echo 'Acct-Output-Gigawords = 0'
    echo "Event-Timestamp = \"$HWDTINTERIM\""
    echo 'NAS-Port-Type = Ethernet'
    echo 'Calling-Station-Id = "3c:67:8c:13:ab:cd"'
    echo 'NAS-Port-Id = "slot=0;subslot=3;port=13;vlanid=601;"'
    echo 'Framed-Interface-Id = 3c67:8c56:106:101'
    echo 'Framed-IPv6-Prefix = 2001:db8:beba:fada::/64'
    echo 'Service-Type = Framed-User'
    echo 'Framed-Protocol = PPP'
    echo 'Delegated-IPv6-Prefix = 2001:db8:beba:c0ca::/64'
    echo 'Idle-Timeout = 0'
    echo 'Session-Timeout = 0'
    echo 'Huawei-IPHost-Addr = "100.88.88.2 3c:67:8c:13:ab:cd"'
    echo 'Huawei-Priority = 15'
    echo 'Huawei-Connect-ID = 0'
    echo 'Huawei-Domain-Name = "ispname-domain-1"'
    echo 'Huawei-Accounting-Level = 0'
    echo 'Huawei-Up-Priority = 15'
    echo 'Huawei-Down-Priority = 15'
    echo 'Huawei-Acct-IPv6-Input-Octets = 0'
    echo 'Huawei-Acct-IPv6-Output-Octets = 0'
    echo 'Huawei-Acct-IPv6-Input-Packets = 0'
    echo 'Huawei-Acct-IPv6-Output-Packets = 0'
    echo 'Huawei-Acct-IPv6-Input-Gigawords = 0'
    echo 'Huawei-Acct-IPv6-Output-Gigawords = 0'
    echo 'Huawei-User-Mac = "3c:67:8c:13:ab:cd"'
    echo 'Huawei-Acct-Update-Address = 0'
) | radclient -4 -x 10.177.177.20:1813 acct 'tulipa'