Toolpack:Configuring RADIUS authorization B - Revision history

Allyntree at 17:06, 22 June 2024

2024-06-22T17:06:09Z

← Older revision		Revision as of 13:06, 22 June 2024
Line 7:		Line 7:
	\|-		\|-
	\|Tmedia		\|Tmedia
	\|2.8, 2.9, 2~~.10~~, 3.0, 3.2		\|3.0, 3.2, 3.3
	\|-		\|-
	\|SBC		\|SBC
	\|3.0, 3.1		\|3.1, 3.3
	\|}		\|}

Allyntree at 19:14, 10 December 2020

2020-12-10T19:14:32Z

← Older revision		Revision as of 15:14, 10 December 2020
Line 1:		Line 1:
	~~=== '''''Applies to version(s): 2.8, 2.9, 2.10, 3.0, 3.1, 3.2''''' ===~~
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}
	{\| class="wikitable"		{\| class="wikitable"

Allyntree at 19:14, 10 December 2020

2020-12-10T19:14:22Z

@@ Line 1: / Line 1: @@
 === '''''Applies to version(s): 2.8, 2.9, 2.10, 3.0, 3.1, 3.2''''' ===
 {{DISPLAYTITLE:Configuring RADIUS Authorization }}
 This article describes how to configure RADIUS authentication and authorization.

Allyntree at 17:48, 1 September 2020

2020-09-01T17:48:05Z

← Older revision		Revision as of 13:48, 1 September 2020
Line 1:		Line 1:
	=== '''''Applies to version(s): v2.8, v2.9, v2.10, v3.0, v3.1''''' ===		=== '''''Applies to version(s): 2.8, 2.9, 2.10, 3.0, 3.1, 3.2''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

Allyntree at 14:58, 1 May 2019

2019-05-01T14:58:28Z

← Older revision		Revision as of 10:58, 1 May 2019
Line 1:		Line 1:
	=== '''''Applies to version(s): v2.8, v2.9, v2.10, v3.0''''' ===		=== '''''Applies to version(s): v2.8, v2.9, v2.10, v3.0, v3.1''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

Allyntree at 17:45, 11 December 2017

2017-12-11T17:45:25Z

← Older revision		Revision as of 13:45, 11 December 2017
Line 1:		Line 1:
	=== '''''Applies to version(s): v2.8, v2.9, v2.10''''' ===		=== '''''Applies to version(s): v2.8, v2.9, v2.10, v3.0''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

Allyntree at 23:53, 24 November 2016

2016-11-24T23:53:44Z

← Older revision		Revision as of 19:53, 24 November 2016
Line 1:		Line 1:
	=== '''''Applies to version(s): v2.8, v2.9.''''' ===		=== '''''Applies to version(s): v2.8, v2.9, v2.10''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

Allyntree at 15:29, 8 December 2015

2015-12-08T15:29:08Z

← Older revision		Revision as of 11:29, 8 December 2015
Line 1:		Line 1:
	=== '''''Applies to version(s): v2.8.''''' ===		=== '''''Applies to version(s): v2.8, v2.9.''''' ===
	{{DISPLAYTITLE:Configuring RADIUS Authorization }}		{{DISPLAYTITLE:Configuring RADIUS Authorization }}

Allyntree: /* Applies to version(s): v2.8. */

2014-10-20T18:05:44Z

Applies to version(s): v2.8.

← Older revision		Revision as of 14:05, 20 October 2014
Line 6:		Line 6:
	1- Click '''Routing script''' in the navigation panel.		1- Click '''Routing script''' in the navigation panel.

	[[Image:~~ConfigureRadius_0~~.png\|border]]		[[Image:ConfigureRadiusAuthorization_0.png\|border]]


	2- '''Edit''' your main script		2- '''Edit''' your main script

	[[Image:~~ConfigureRadius_~~.png]]		[[Image:ConfigureRadiusAuthorization_1.png]]

Allyntree: New 2.8 article

2014-10-20T18:04:56Z

New 2.8 article

New page

=== '''''Applies to version(s): v2.8.''''' ===
{{DISPLAYTITLE:Configuring RADIUS Authorization }}

This article describes how to configure RADIUS authentication and authorization.

1- Click '''Routing script''' in the navigation panel.

[[Image:ConfigureRadius_0.png|border]]

2- '''Edit''' your main script

[[Image:ConfigureRadius_.png]]

3- Do the following operations in your script:

*'''At the top of the page'''
require 'radius_authorization'
*'''Following your main class definition'''
include RadiusAuthorization
*'''Add before filter in your main class'''
before_filter :method => :radius_authorization
*'''Optional: add the ''fill_authorization_attributes'' method'''
def fill_authorization_attributes(params, auth)
auth[:"User-Name"] = "bob"
...
end
*'''Optional: add the ''requires_radius_authorization?'' method to reduce the scope of the authorization:
def requires_radius_authorization?(params)
case params[:call][:called]
when /^123/
true
...
else
false
end
end
*'''Optional: add methods to handle the possible results of authorization: ''on_radius_authorization_accept'', ''on_radius_authorization_challenge'', ''on_radius_authorization_reject'' and ''on_radius_authorization_timeout'':'''
def on_radius_authorization_accept(params, auth)
log_trace :always, "Access-Accept: #{auth.inspect}"
end

def on_radius_authorization_challenge(params, auth)
log_trace :always, "Access-Challenge: #{auth.inspect}"
raise RoutingException, :call_rejected
end

def on_radius_authorization_reject(params, auth)
log_trace :always, "Access-Reject: #{auth.inspect}"
raise RoutingException, :call_rejected
end

def on_radius_authorization_timeout(params, auth)
log_trace :always, "Authorization Timeout"
raise RoutingException, :call_rejected
end

4- Click 'Save'

== Example ==
The following script configures RADIUS authorization with the default attributes (''User-Name'', ''Calling-Station-Id'' and ''Called-Station-Id''):
<pre>
require 'base_routing'
require 'radius_authorization' # <- Add this line here

class MyScript < BaseRouting
include RadiusAuthorization # <- Add this line here

before_filter :method => :radius_authorization # <- Add this line here

route_match :call_field_name => :called
route_match :call_field_name => :calling
route_match :call_field_name => :nap
route_remap :call_field_name => :called, :route_field_name => :remapped_called
route_remap :call_field_name => :calling, :route_field_name => :remapped_calling
route_remap :call_field_name => :nap, :route_field_name => :remapped_nap
end

@@routing = MyScript.new

def init_routes( routes )
@@routing.init routes
end

def route( call, nap_list )
@@routing.route call, nap_list
end
</pre>

== Advanced example ==
The following script configures RADIUS authorization with user-defined attributes, and prints attributes found in the Access-Accept message if it is received:
<pre>
require 'base_routing'
require 'radius_authorization' # <- Add this line here

class MyScript < BaseRouting
include RadiusAuthorization # <- Add this line here

before_filter :method => :radius_authorization # <- Add this line here

def fill_authorization_attributes(params, auth) # <- Add this line here
call = params[:call] # <- Add this line here
auth[:"User-Name"] = "bob" # <- Add this line here
auth[:"User-Password"] = "hello" # <- Add this line here
auth[:"Calling-Station-Id"] = call[:calling] # <- Add this line here
auth[:"Called-Station-Id"] = call[:called] # <- Add this line here
end # <- Add this line here

def on_radius_authorization_accept(params, auth) # <- Add this line here
log_trace :always, "Access-Accept: #{auth.inspect}" # <- Add this line here
end # <- Add this line here

route_match :call_field_name => :called
route_match :call_field_name => :calling
route_match :call_field_name => :nap
route_remap :call_field_name => :called, :route_field_name => :remapped_called
route_remap :call_field_name => :calling, :route_field_name => :remapped_calling
route_remap :call_field_name => :nap, :route_field_name => :remapped_nap
end

@@routing = MyScript.new

def init_routes( routes )
@@routing.init routes
end

def route( call, nap_list )
@@routing.route call, nap_list
end
</pre>