This shows you the differences between two versions of the page.
| Both sides previous revision
Previous revision
|
Last revision
Both sides next revision
|
blog:aruba-mpsk-freeradius [2020/03/02 21:06]
v0tti |
blog:aruba-mpsk-freeradius [2020/06/29 14:59]
v0tti [Using Aruba MPSK with FreeRADIUS] |
| ==== Configure the FreeRADIUS Server ==== | ==== Configure the FreeRADIUS Server ==== |
| |
| When a client connects the controller will send a RADIUS request to the server. In the response you have to include the vendor-specific attribute ''Aruba-MPSK-Passphrase''. [[https://github.com/FreeRADIUS/freeRADIUS-server/blob/efba32e839caf5c276cef131b5f7d2ec3048f66a/share/dictionary/RADIUS/dictionary.aruba#L57|FreeRADIUS already includes the this]] with correct encoding and encryption (check if your version already includes this VSA, otherwise place the linked file at ''/usr/share/freeRADIUS/dictionary.aruba'' (this applies to Debian)). Here is an configuration example, please note that "ClearTextPassphrase" is the clear text password for the requesting device: ''Aruba-MPSK-Passphrase := "ClearTextPassphrase"''. | When a client connects the controller will send a RADIUS request to the server. In the response you have to include the vendor-specific attribute ''Aruba-MPSK-Passphrase''. [[https://github.com/FreeRADIUS/freeRADIUS-server/blob/efba32e839caf5c276cef131b5f7d2ec3048f66a/share/dictionary/RADIUS/dictionary.aruba#L57|FreeRADIUS already includes this]] with correct encoding and encryption (check if your version already includes this VSA, otherwise place the linked file at ''/usr/share/freeRADIUS/dictionary.aruba'' (this applies to Debian)). Here is an configuration example, please note that "ClearTextPassphrase" is the clear text password for the requesting device: ''Aruba-MPSK-Passphrase := "ClearTextPassphrase"''. |
| |
| If you operate a proxying RADIUS, like we do, your config could look like this: | If you operate a proxying RADIUS, like we do, your config could look like this: |