虛擬環(huán)境下的詳細配置

...v.虛擬環(huán)境下的具體配置環(huán)境Pppoe效勞器和radius效勞器操作系統(tǒng)：CentOS5.6rp-pppoefreeradiusppp-2.4.4.tar.gz包yuminstallrp-pppoefreeradius直接安裝拓撲圖pppoe效勞器上的配置1.安裝pppoe以及freeradiusyuminstallrp-pppoefreeradius2.pppoe效勞器本地撥號驗證vi/etc/ppp/pppoe-server-options加上require-chap配置一個測試用的賬號和密碼vi/etc/ppp/chap-secrets加上steve*testing*前面的是賬號，后面的是密碼在teiminal下輸入來開啟pppoe效勞器上面的ip地址和地址池無關(guān)緊要之后在window下進展寬帶撥號，連接成功。說明pppoe效勞器正常工作3.使pppd使用radius效勞器認證復(fù)制相關(guān)模塊mkdir/etc/ppp/pluginscp/usr/lib64/pppd/2.4.4/*/etc/ppp/plugins/下載ppp-2.4.4.tar.gz，官方好似被墻了，翻墻或者到其他地方下mkdir/etc/ppp/radiuscp*/etc/ppp/radius配置vi/etc/ppp/options加上以下兩句：plugin/etc/ppp/plugins/radius.soradius-config-file/etc/ppp/radius/radiusclient.confvi/etc/ppp/radius/radiusclient.conf修改為：auth_orderradiuslogin_tries4login_timeout60nologin/etc/nologinissue/etc/ppp/radius/issueauthserver192.168.1.100:1812acctserver192.168.1.100:1813servers/etc/ppp/radius/serversdictionary/etc/ppp/radius/dictionarylogin_radius/usr/local/sbin/login.radiusseqfile/var/run/radius.seqmapfile/etc/ppp/radius/port-id-mapdefault_realmradius_timeout10radius_retries3login_local/bin/loginvi/etc/ppp/radius/servers添加：192.168．1.100testing123vi/etc/ppp/radius/dictionary添加INCLUDE/etc/ppp/radius/dictionary.microsoftRadius效勞器上的配置1.安裝freeradiusyuminstallfreeradius2.配置radius效勞器環(huán)境 vi/etc/raddb/clients.conf根據(jù) client127.0.0.1{secret=123456shortname=localhostnastype=other}配置從127.0.0.1這個客戶端連接上radius效勞器所需shortname及密碼 vi/etc/raddb/users添加用戶 steveAuth-Type:=Local,User-Password=="testing"Service-Type=Framed-User,Framed-Protocol=PPP，5.0,Framed-Routing=Broadcast-Listen,Framed-Filter-Id="std.ppp",Framed-MTU=1500,Framed-pression=Van-Jacobsen-TCP-IP驗證radius效勞器是否正常工作：翻開兩個terminal分別輸入 /usr/sbin/radiusd-X radteststevetestinglocalhost0testing123出現(xiàn)Access-Accept的字樣那么表示radius效勞器開場工作了3.為pppoe效勞器分配radius客戶端client192.168.1.101{secret=testingshortname=testingnastype=other}4.使用mysql作為radius效勞器的用戶數(shù)據(jù)庫下載freeradius源碼包以及一些mysql組件yuminstallmysqlmysql-servermysql-develfreeradius-mysql創(chuàng)立radius數(shù)據(jù)庫/etc/rc.d/init.d/mysqldstartmysqladmin-uroot

createradiusmysql

-u

root

radius輸入insertintoradgroupreply(groupname,attribute,op,value)values('user','Auth-Type',':=','Local');insertintoradgroupreply(groupname,attribute,op,value)values('user','Service-Type','=','Framed-User');insertintoradgroupreply(groupname,attribute,op,value)values('user','Framed-IP-Netmask','=','255.255.255.255');insertintoradgroupcheck(groupname,attribute,op,value)values("user","Auth-Type",":=","Local");再添加用戶信息insertintoradcheck(username,attribute,op,value)values('sqltest','User-Password','==','testing');insertintousergroup(username,groupname)values('sqltest','user');修改radius配置vi/etc/raddb/radiusd.conf在authorize{}和accounting{}中取消sql的注釋，并把$INCLUDE

${confdir}/sql.conf的注釋也取消掉vi/usr/local/freeradius/etc/raddb/sql.conf修改mysql的用戶名密碼，默認為空sql{driver="rlm_sql_mysql"server="localhost"login="root"password=""radius_db="radius"}在pppoe效勞器所在的虛擬機上配置nat，使內(nèi)網(wǎng)的虛擬機2能夠上外網(wǎng)#echo1>/proc/sys/net/ipv4/ip_forward翻開ip轉(zhuǎn)發(fā)功能.-s表示源網(wǎng)絡(luò)，即內(nèi)網(wǎng)地址；-o為連接因特網(wǎng)的接口在Radius效勞器所在的虛擬機上關(guān)閉ip轉(zhuǎn)發(fā)這個地方不是ip轉(zhuǎn)發(fā)命令應(yīng)該是iptables–F去除防火墻當中的所有規(guī)那么這個地方不是ip轉(zhuǎn)發(fā)命令應(yīng)該是iptable