Main Page
From FreeRADIUS Wiki
Contents |
Overview
FreeRADIUS is a modular, high performance and feature-rich RADIUS suite including server, clients, development libraries and numerous additional RADIUS related utilities.
As the premiere open source RADIUS suite it is included as a standard package with numerous Operating Systems, has binary packages for many others and has source available which is known to build on almost anything. Production deployments include large scale installations comprising multiple AAA servers with over ten million users and millions of requests per day. It supports request proxying, with fail-over and load balancing, as well as the ability to access many types of back-end databases. Different classes of Authentication requests can trigger access of different Authentication and Authorization databases (with cascaded fall back), and Accounting records can be simultaneously recorded in multiple different storage databases and directories.
Other RADIUS Servers are available.
We also keep a list of Acknowledgements of contributions to FreeRADIUS development.
RADIUS Client Support
FreeRADIUS comes with:
- Complete support for RFC 2865 and RFC 2866 attributes.
- EAP with EAP-MD5, EAP-SIM, EAP-TLS, EAP-TTLS, EAP-PEAP, and Cisco LEAP EAP sub-types
- Vendor-Specific Attributes for almost one hundred vendors, including BinTec, Foundry, Cisco, Juniper, Lucent/Ascend, HP ProCurve, Microsoft, USR/3Com, Acc/Newbridge and many more.
All known RADIUS Clients are supported.
Flexible Configuration
FreeRADIUS provides a wide range of methods to select user configurations. The server can select a configuration based on any of the following criteria :
- Attributes which have a given value
- Attributes which do not have a given value
- Attributes which are in the request (independent of their value)
- Attributes which are not in the request
- String attributes which match a regular expression
- Integer attributes which match a range (e.g. , =)
- Source IP address of the request. (This can be different from the NAS-IP-Address)
- Shortname defined for a NAS box. (This can be different from the NAS-Identifier)
- Group of NAS boxes. (These may be grouped based on Source IP address, NAS-IP-Address, or any other configuration)
- User-Name
- DEFAULT template configuration
- multiple cascading DEFAULT template configurations
Documentation
This wiki is an attempt to collect the large amount of documentation relating to FreeRADIUS together in one place. Pages of particular interest to newcommers will be the FAQ and HOWTO sections, although the Traditional FreeRADIUS docs page has some info which may not yet be integrated with the wiki.
There are many third-party web sites and HOWTO's that give advice on FreeRADIUS. While these may seem helpful, they are usually years out of date, and refer to old (1.0 or 1.1) versions, instead of 2.0. Very often, the advice that they give is also wrong.
While the FreeRADIUS documentation is a mesh of pages that are inter-linked, the following is an overview of the types of information available:
- Installation
- Configuration
- Base Modules
- Creating your own Modules2 for FreeRADIUS Version 2
- Creating your own Modules for FreeRADIUS Verion 1
- Radius Tools
- HOWTO
- Example Setups Cookbook
- Glossary