TekRADIUS - Recent Posts

Topic "SQL-Database access" a message from rbech

Wed, 08 Sep 2010 23:30:25 GMT

Hello,
I have connected to Tekradius.mdf with MS Access 2007, but I can only read the tables and do queries.
Is there a way to add or change values straight, without using TRCLI.exe?

Topic "how to use "external-executable "?" a message from admin

Tue, 07 Sep 2010 09:02:01 GMT

Hi,

What is your usage scenario? What type of executable will you use?

Best regards,

Yaisn KAPLAN

Topic "how to use "external-executable "?" a message from samenlia

Tue, 07 Sep 2010 06:39:46 GMT

i want to use "external-executable " ,but how ?

Topic "Active sessions ..." a message from admin

Sun, 05 Sep 2010 23:07:56 GMT

Please set logging level to debug at settings / service parameters and examine TekRADIUS log (Accessible through file menu)
to make sure that TekRADIUS recevies RADIUS accounting packets.

Topic "Active sessions ..." a message from ankesh

Sat, 04 Sep 2010 15:44:54 GMT

admin wrote:

Hi,
Please make sure that RADIUS Accounting is supported on your network devices and also enabled.
Best regards,
Yasin KAPLAN

Hi,
Thanks for your reply,
I have checked accounting function on ZTE L3 switch and highend router. It supports accounting function as well.
I have done below configuration.
but still I am not getting any active session whenever user login.
Please suggest what could be the reason.

!
!
user-authentication-type radius 1 chap
!
!
radius authentication-group 1
ip vrf ONM
server 1 10.10.10.1 master key zxr10 port 1812
algorithm first
nas-ip-address 10.255.8.1
user-name-format strip-domain
vendor enable
!
!
radius accounting-group 1
alias Tekradius
ip vrf ONM
server 1 10.10.10.1 master key zxr10 port 1813
algorithm first
nas-ip-address 10.255.8.1
user-name-format strip-domain
vendor enable
local-buffer enable
!
!

Topic "Feature Request" a message from admin

Sat, 04 Sep 2010 14:02:21 GMT

Hi,

Thanks for your interest in TekRADIUS.

I've received lots of request for MySQL support. It's on my roadmap but I can not fiv an exact date for the availibility.

You have an option to keep user passwords unencrypted in the database or you can use command line utility
trcli.exe to manipulate user or group profiles.

Thank you,

Yasin KAPLAN

Topic "Active sessions ..." a message from admin

Sat, 04 Sep 2010 11:48:06 GMT

Hi,
Please make sure that RADIUS Accounting is supported on your network devices and also enabled.
Best regards,
Yasin KAPLAN

Topic "Feature Request" a message from Omega

Sat, 04 Sep 2010 06:50:12 GMT

I do not know if this is the right place to post this, but I would like to ask for two features to be added.

I would like to see MySQL support
I would also like to have the option to use a non proprietary password encryption method so that we can write applications to change them without having plain text passwords in the database.

I am pretty sure that I am not the only one that would like to see these features added.

Apart from that I believe that you have a great product and have done a great job with this so far.

Topic "Active sessions ..." a message from ankesh

Sat, 04 Sep 2010 02:29:17 GMT

Hi,
I am using Tekradius to authenticae my network devices.
I am usoing ZTE L3 switches and High end routers.
All the devices are getting authenticate properly but in Tekradius I am unable to see active session details.
Please help how to resolve this issue.

Topic "New to TekRADIUS need help" a message from admin

Mon, 30 Aug 2010 13:59:23 GMT

Hi,

As far as I understand TekRADIUS is installed behind a NAT gateway. If so you'll enter WAN IP address of your NAT gateway to Open-Mesh configuration.
You can enter the same IP address as secondary IP address. You can enter any NAS ID (TekRADIUS e.g.) You must add mapping for RADIUS authentication (UDP 1812)
and RADIUS Accounting (RADIUS 1813) services in NAT configuration of your gateway. Do not forget add a default client entry for Open-Mesh at TekRADIUS Manager / Clients tab.

Best regards,

Yasin KAPLAN

Topic "New to TekRADIUS need help" a message from vsubramanian

Sun, 29 Aug 2010 04:20:59 GMT

I use open-mesh dashboard and need to setup radius authentication for wireless users. I have TekRADIUS installed on a Windows XP SP3 desktop. On open-mesh dashboard i have the option to mention the IP of two radius servers as well as NASID.
I use DHCP in my wired network and same on several access points on my mesh network with about 14 nodes. I have created a test user name and password on the radius server side. What IP Address and what NASID should I use to test for wireless user login. I do not yet have a WAN ip for my Tekradius server box ( i mean the xp desktop).

Kindly get back to me.

Thanks,
Subra

Topic "time-limit" a message from admin

Wed, 25 Aug 2010 17:56:09 GMT

Hi,

If your access server supports RADIUS accounting you can define time based quota limits for your users. When you add Session-Timeout to
user profile as a reply item, it's the access server's responsiblity to disconnect user session after session timer expiry. Check vendor resources
if your access server supports session expiration using Session-Timeout attribute.

Best regards,

Yasin KAPLAN

Topic "Error 628 after registration in vpn connecion" a message from admin

Wed, 25 Aug 2010 16:35:49 GMT

You welcome

Topic "time-limit" a message from majid_std

Wed, 25 Aug 2010 16:09:13 GMT

Dear Friend,
how do i disconnect user after time-limit is reached ?
i used session-timeout but session time out is related to session and after disconnect and reconnect user has new session time ?
for example i created a daily user with time-limit(check)=1440 and session-timeout(success-Reply)=1440. 1) if user disconnected in the middle of day and reconnect it can use until one day and in fact use 1.5 days instead of one day ! and for my network my users connect to my network more than 10 days ! without discconection.
if i use credit per period , does the radius send disconnect reply to NAS after credit is zero ? or NOT ?

Topic "Error 628 after registration in vpn connecion" a message from majid_std

Wed, 25 Aug 2010 15:47:07 GMT

it does not need , only i set Generate-MS-MPPE-Keys in group profile and it is solved, thanks for help,

Topic "Error 628 after registration in vpn connecion" a message from admin

Wed, 25 Aug 2010 11:52:32 GMT

Hi,

Please try following settings at VPN connection's Properties / Advanced (Custom Settings) / Settings:

Best regards,

Yasin KAPLAN

Topic "Error 628 after registration in vpn connecion" a message from majid_std

Tue, 24 Aug 2010 21:06:48 GMT

Dear friend,
i get error 628 in vpn in windows 7

Topic "TekRadius and Windows server 2008" a message from admin

Tue, 24 Aug 2010 09:22:51 GMT

Hi,
Yes, you can install TekRADIUS to Windows 2008 Server.

Best regards,

Yasin KAPLAN
edited by admin on 24.08.2010

Topic "TekRadius and Windows server 2008" a message from mashi

Tue, 24 Aug 2010 03:24:24 GMT

Hello

can install on windows server 2008 or AD 2008?
had problem with NAP

regards

regards

Topic "Active sessions ..." a message from admin

Mon, 23 Aug 2010 10:04:52 GMT

When you disable wireless connection from "Network Connections", Windows bypasses D-Link driver functions and
client can not send a proper signal to the AP for disconnection.

TekRADIUS does not have a feature to check if user session still active in the access server. This is the access server's
responsibility.

Topic "Installation" a message from admin

Mon, 23 Aug 2010 09:49:24 GMT

Hi,

Here are my quick answers;

1. No
2. Access Point must support RADIUS authentication using 802.1X method.
3. There is no special need for WiFi card.

Best regards,

Yasin KAPLAN

Topic "Active sessions ..." a message from segaodma

Mon, 23 Aug 2010 05:11:21 GMT

still no solution ...

Topic "Installation" a message from xyn

Mon, 23 Aug 2010 03:40:09 GMT

Hi Everyone! I just want to ask some details coz I dont have an idea how this stff work..

Question 1. Should I need 2 NIC as a hardware reqirement for a server ?, I have only XP pro on my OLD P4
Question 2. Is there any requirement on the AP?
Question 3. Is there any wifi card or mobile or any wifi gadget requirement to connect?

Topic "What is the difference between these versions??" a message from admin

Sat, 21 Aug 2010 18:18:42 GMT

• Version 3.7 - Log files are kept in \Logs directory and rotated daily.

• Version 3.7 - You can define a “default” user profile to be used when a matching user profile cannot be found for an incoming RADIUS authentication request. TekRADIUS manual for configuring this feature.

• Version 3.6 - You can specify credit limits for daily, weekly or monthly periods and you can run and check result of an external executable (External-Executable) as a check item. See TekRADIUS manual for configuring these features.

• Version 3.5 - Generate-MS-MPPE-Keys usage has been changed in version 3.5. See TekRADIUS manual for details.

• Version 3.5 - Version 3.5 introduces two new attributes; Failure-Reply-Type and Secondary-Group. You can have a secondary group membership for a user other than user's default group. If you add this attribute to user's profile, TekRADIUS will try to authenticate incoming access-request with user attributes and primary group attributes first and if it fails, TekRADIUS will try to authenticate again with user attributes and secondary group attributes. Secondary-Group is a string type attribute and can exist only as a check attribute in user profiles. Secondary-Group is not supported with PEAP authentication.
You can add Failure-Reply-Type attribute as a check attribute to user or group profiles. This attribute alter behavior of TekRADIUS when Failure-Reply attributes exists in user or group profile. You can set its value to Accept or Reject. When you set its value to Accept, Failure-Reply attributes are sent in an Access-Accept and if you set its value to Reject, Failure-Reply attributes are sent in an Access-Reject message. If this attribute does not exist in user or group profile and Failure-Reply attributes are configured, TekRADIUS will send Failure-Reply attributes in an Accepts-Accept message. Failure-Reply-Type is a integer type attribute and can exist only as a check attribute in user profiles.

• Version 3.5 - You can also specify your own delimiter character to be used to enter string type multiple instance reply attributes in user or group profiles. Its default value is semi-colon “;”. You can set it Settings / SQL Connection tab.

• Version 3.4 - A new reply type is introduced in version 3.4. If you would like to provide restricted access to unauthenticated users add Failure-Reply attributes to user or group profiles. TekRADIUS will reply with Access-Accept containing Failure-Reply attributes if user or group profile has Failure-Reply attributes when authentication fails. If user or group profile has not Failure-Reply attributes, TekRADIUS will reply with Access-Reject message (This feature is not available for PEAP authentication, VPN authentication and when authentication failure caused by invalid authentication method).
Use this feature with extreme care; if Default user group has Failure-Reply attributes, all failed authentication attempts will be replied by Access-Accept messages containing Failure-Reply attributes. When a user is authorized with Failure-Reply Simultaneous-Use, Expire-Date, Login-Time, TekRADIUS-Status and Quota check will not be done.
edited by admin on 21.08.2010

Topic "What is the difference between these versions??" a message from Warnielle

Fri, 20 Aug 2010 23:32:03 GMT

Hello, I know the difference between versions 3.6 and 3.7, do I use the 3.4 and wanted to know what's changed in new versions.

Topic "How to supply a "Service-Type" via TekRADIUS" a message from admin

Wed, 18 Aug 2010 13:31:41 GMT

You welcome

Topic "How to supply a "Service-Type" via TekRADIUS" a message from Daniel.Lukic

Wed, 18 Aug 2010 11:27:33 GMT

Hi Yasin,
thank you for your help. What you suggested works perfectly for me.
Regards, Daniel

Topic "WPA2 Authentication" a message from admin

Wed, 18 Aug 2010 09:15:51 GMT

Hi,

You can have TLS-Certificate attribute in group profile. But you should have a unique password for each user profile.
User attributes override group attributes.

Topic "How to supply a "Service-Type" via TekRADIUS" a message from admin

Wed, 18 Aug 2010 09:08:35 GMT

Hi,

Please try adding Service-Type attribute as a Success-Reply attrbiute in the user profile.

Best regards,

Yasin KAPLAN

Topic "WPA2 Authentication" a message from jaaron64

Tue, 17 Aug 2010 21:08:06 GMT

Is that per user or per group? If I create a group with those elements and assign the user to a specific group, does the the user need specific attributes or are they all inherited from the group, (which would mean that group attributes take priority over user attributes)?