Criar comunicação Radius com NE8000

Criada por Danilo Tomich, Modificado em Tue, 16 Apr 2024 na (o) 09:35 AM por Danilo Tomich

ipv6 prefix dhcp-pd-lan delegation
 prefix 2804:75C0:1300::/40 delegating-prefix-length 56
 pd-unshare-only

Nesse exemplo vamos criar comunicação Radius com o Ne8000 com o IXCSoft

01 - Crie um usuário de comunicação entre o IXC e o NE.

ssh user ixcsoft
ssh user ixcsoft authentication-type password
ssh user ixcsoft service-type all
comm

aaa
local-user ixcsoft password irreversible-cipher senhadouser
local-user ixcsoft service-type ssh
 local-user ixcsoft level 3
 local-user ixcsoft state block fail-times 3 interval 5
comm

Feito o user, vamos criar o modo de autenticação:

aaa
 ppp username check
 pure-user-name no-exist-policy online
 acct-session-id-version version3
 user-name minimum-length 4
 domain-name-delimiter <
comm

Vamos criar um accounting scheme.
Para informar, por exemplo, que horas logou, que horas desconectou.
Endereço Mac, endereço ip taxa de download, upload...
É para comprovar a contabilidade de acesso

aaa
accounting-scheme AVANTNET
interim interval 20 traffic hash
accounting start-fail online
comm

Vamos ativar as configurações mínimas de um servidor radius.

radius-server group AVANTNET
radius-server shared-key-cipher SENHADORADIUS authentication 192.168.0.1 1812 weight 0
radius-server shared-key-cipher SENHADORADIUS accounting 192.168.0.1 1813 weight 0
radius-server attribute translate
radius-server user-name original
radius-server user-name trust-server-request
radius-attribute include HW-Auth-Type
radius-attribute include hw-auth-type
radius-attribute include Reply-Message coa-nak
radius-attribute include edsg-service-name accounting-request
radius-attribute include Event-Timestamp accounting-on accounting-off
comm
radius-attribute translate extend HW-Auth-Type vendor-specific 2011 109 access-request account
radius-attribute assign hw-mng-ipv6 pppoe motm
radius-attribute case-sensitive qos-profile-name
comm
radius-attribute apply user-name match user-type ipoe
radius-attribute apply framed-ipv6-pool match pool-type
radius-attribute service-type value outbound user-type ipoe
radius-attribute hw-user-password simple coa-request
comm

Vamos criar um virtual Template:

interface Virtual-Template0
ppp authentication-mode pap chap
ppp keepalive interval 10 retransmit 3 response-timeout 10
pppoe-server service-name-parameter AVANTNET
pppoe-server ac-name AVANTNET
tcp adjust-mss 1420
ip urpf strict enable check subnet
ipv6 urpf strict enable check subnet

Caso queira manipular o MTU, pode adicionar o MTU que deseja no Template.

 user-basic-service-ip-type ipv4

Criamos o Pool.
Nesse exemplo utilizamos um /20 para os ips privados dos clientes.

ip pool invalido bas local
 gateway 100.64.0.1 255.255.248.0
 section 0 100.64.0.2 100.64.15.254
 dns-server 179.48.70.150 179.48.70.151
 lease 0 12 0

Vamos criar o pool IPv6.
Mude o bloco de ip para o seu bloco de ipv6 publico.

ipv6 prefix ndra-wan local
 prefix 2804:cafe:1200::/40

ipv6 prefix dhcp-pd-lan delegation
 prefix 2804:cafe:1300::/40 delegating-prefix-length 56
 pd-unshare-only

Vamos criar os Dns IPv6:

ipv6 pool pool_v6_lan bas delegation
 dns-server 2606:4700:4700::1111
 prefix dhcp-pd-lan

ipv6 pool pool_v6_wan bas local
 dns-server 2001:4860:4860::8888 2606:4700:4700::1111
 prefix ndra-wan

Vamos criar domínio:

aaa
domain AVANTNET
  authentication-scheme avantnet
  accounting-scheme avantnet
  radius-server group avantnet
  ip-pool invalido
  ipv6-pool pool_v6_lan
  ipv6-pool pool_v6_wan
  dns primary-ip 8.8.8.8
  dns second-ip 8.8.4.4
  dns primary-ipv6 2001:4860:4860::8888
  dns second-ipv6 2001:4860:4860::8844
  accounting-start-delay 10 online user-type ppp ipoe static
  user-basic-service-ip-type ipv4

Visualizar detalhes.

###Visualizar se o servidor radius conectou:

display radius-server configuration group avantnet