Installation du serveur PPPoE avec le plugin Radius

Article librement inspiré des sites suivants :
http://blog.webdir.bg/linux-pppoe-server-with-radius-suuport/
http://lists.roaringpenguin.com/pipermail/rp-pppoe/2014q4/000478.html

Installation du serveur PPPoE

apt-get install ppp ppp-dev gcc binutils
wget http://www.roaringpenguin.com/files/download/rp-pppoe-3.11.tar.gz
tar xvzf rp-pppoe-3.11.tar.gz
cd rp-pppoe-3.11/src/
./configure --enable-plugin
make && make install

Installation du plugin radius :

apt-get install radiusclient1

wget http://ftp.fr.debian.org/debian/pool/main/r/radiusclient/radiusclient1_0.3.2-14_armel.deb
wget http://ftp.fr.debian.org/debian/pool/main/r/radiusclient/libradius1_0.3.2-14_armel.deb
dpkg -i libradius1_0.3.2-14_armel.deb
dpkg -i radiusclient1_0.3.2-14_armel.deb

On édite ensuite le fichier d’options du serveur PPPoE :

vim /etc/ppp/pppoe-server-options

# PPP options for the PPPoE server
# LIC: GPL
logfile /var/log/ppp.log
require-chap
#refuse-pap
#auth
debug
#login
netmask 255.255.255.0
lcp-echo-interval 10
lcp-echo-failure 6
lcp-max-configure 10
ms-dns 208.67.222.222
ms-dns 208.67.220.220
#defaultroute
#noipdefault
#usepeerdns
#proxyarp
nobsdcomp
novj
novjccomp
nologfd
mtu 1492
mru 1492
plugin radius.so
plugin radattr.so

On edite fichier de conf du client radius :

vim /etc/radiusclient/radiusclient.conf

# General settings
auth_order      radius
login_tries     4 # maximum login tries a user has
login_timeout   60 # timeout for all login tries,  if this time is exceeded the user is kicked out
nologin /etc/nologin
issue   /etc/radiusclient/issue
authserver      xxx.xxx.xxx.xxx # set IP address of RADIUS authentication server
acctserver      xxx.xxx.xxx.xxx # set IP address of RADIUS  accounting server
servers         /etc/radiusclient/servers #  file holding shared secrets used for the communicationclient and server
dictionary      /etc/radiusclient/dictionary
login_radius    /usr/sbin/login.radius
seqfile         /var/run/radius.seq
mapfile         /etc/radiusclient/port-id-map
default_realm
radius_timeout  10 #  time to wait for a reply from the RADIUS server
radius_retries  3
login_local     /bin/login #  program to execute for local login
nas_identifier nas100 # set NAS indentifier name

On edite aussi la configuration des serveurs radius :

vim /etc/radiusclient/servers

# Make sure that this file is mode 600 (readable only to owner)!
#
#Server Name or Client/Server pair              Key
#----------------                               ---------------

xxx.xxx.xxx.xxx                                     RADIUS_server_secret                       thisissecret

On laisse le reste de la configuration par défaut.

Pour finir, on démarre le serveur PPPoE:

pppoe-server -L 10.90.226.86 -I zeoip0 -I zeoip1 -N 1200 -C epsilon-ppp -S epsilon-ppp -T 300 -k -m 1492