Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Configuring Your FreeRADIUS Device to Communicate with JSA

date_range 27-Mar-21

You must have a working knowledge of syslog configuration and the Linux distribution.

Configure FreeRADIUS to send logs to the syslog daemon of the host and configure the daemon to send events to JSA.

FreeRADIUS has multiple distributions. Some files might not be in the same locations that are described in this procedure. For example, the location of the FreeRADIUS startup script is based on distribution. Conceptually, the configuration steps are the same for all distributions.

  1. Log in to the system that hosts FreeRADIUS.
  2. Edit the /etc/freeradius/radius.conf file.
  3. Change the text in the file to match the following lines:
    content_copy zoom_out_map
    logdir = syslog
    Log_destination = syslog
    log{
        destination = syslog
        syslog_facility = daemon
        stripped_names = no
        auth = yes
        auth_badpass = no
        auth_goodpass = no
    }
  4. Edit the /etc/syslog.conf file.
  5. To configure log options, add the following text.
    # .=notice logs authentication messages (L_AUTH).

    # <facility_name>.=notice @<IP_address_of_JSA_Event_Collector_or_JSA_Console>

    # .=err logs module errors for FreeRADIUS.

    #<facility_name>.=err @<IP_address_of_JSA_Event_Collector_or_JSA_Console>

    # .* logs messages to the same target.

    # <facility_name>.* @<IP_address_of_JSA_Event_Collector_or_JSA_Console>

    An example syslog facility name is local1. You can rename it.

    To configure a log option, remove the comment tag (#) from one of the active lines that contains an @ symbol.

  6. If the configuration change does not load automatically, restart the syslog daemon. The method to restart the syslog daemon depends on the distribution that is used. The following table lists possible methods.

    Operating system distribution

    Command to restart daemon

    Red Hat Enterprise Linux

    service syslog restart

    Debian Linux or Ubuntu Linux

    /etc/init.d/syslog restart

    FreeBSD operating system

    /etc/rc.d/syslogd restart

  7. Add the following options to the FreeRADIUS startup script:
    • -l syslog

    • -g <facility_name>

    The -g value must match the facility name in Step 5.

  8. Restart FreeRADIUS.
footer-navigation