#Created by Cottrell and Caporossi
#Creation Date:	05-22-2008
#Last Edited:	05-22-2008



#Foreground
#LogStdout
LogDir		c:\Program Files\Radiator\logs	
DbDir			c:\Program Files\Radiator
LogFile		%L/%m%d%y.log
DictionaryFile	%D/dictionary
PidFile		%D/radiusd.pid



AuthPort 1812
AcctPort 1813

Trace 		3

<Client 128.23.246.129>
	Identifier 			ppp
	Secret 			putyoursecrethere
	DupInterval			2
	NasType			Cisco
	SNMPCommunity		putyoursecrethere
	IgnoreAcctSignature	1
</Client>

<Client 128.23.36.1>
	Identifier			vpn
	IdenticalClients		128.23.242.1
	Secret			putyoursecrethere
	DupInterval			2
	NasType			Cisco
	SNMPCommunity		putyoursecrethere
	IgnoreAcctSignature	1
</Client>

<Client 128.23.203.203>
	Identifier hal
	Secret putyoursecrethere
	DupInterval 2 
	NasType unknown
	IgnoreAcctSignature 1
</Client>

PreClientHook file:"%D/scripts/acct_adjustment.pl"

<Client 10.24.70.11>
	IdenticalClients 10.24.70.12,10.24.70.21,10.24.70.22,10.24.70.31,10.24.70.32,10.24.70.41,10.24.70.42,10.24.70.13,10.24.70.14,10.24.70.23,10.24.70.24,10.24.70.15,10.24.70.16,10.24.70.25,10.24.70.26,10.24.238.41,10.24.238.42
	Secret			putyoursecrethere
	Identifier			airespace
	DupInterval			2
	NasType			Cisco
	SNMPCommunity		putyoursecrethere
	IgnoreAcctSignature 	1
</Client>

#<Log FILE>
#	Identifier debugging
#	Trace 4
#	LogMicroseconds
#	Filename %L/%m%d%y.debug.log
#</Log>

<Handler Request-Type = Accounting-Request, Acct-Status-Type=/start|stop/i>
	PreProcessingHook file:"%D/scripts/eap_anon_hook.pl"
	AddToRequest Connect-Info=%{Client:Identifier},Ascend-Authen-Alias=%h
	StripFromRequest Class
	<AuthBy RADIUS>
		Host radacct.mdc.musc.edu
		Secret putyoursecrethere
		AcctPort 1813
		Retries 10
		AcctFailedLogFileName %L/%{Client:Identifier}/%m%d%y.log.missed
	</AuthBy>
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
</Handler>

<AuthBy INTERNAL>
	Identifier			AcctStartStopOnly
	AcctStartResult			ACCEPT
	AcctStopResult			ACCEPT
	AcctAliveResult			IGNORE
</AuthBy>

<Handler TunnelledByPEAP=1, Client-Identifier=airespace>
	AuthByPolicy ContinueUntilAccept
	RewriteUsername s/(.*)\\(.*)/$2/
	<AuthBy LSA>
		Domain clinlan
		#Group Domain Users
		#DomainController zulu
		EAPType MSCHAP-V2
	</AuthBy>
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
	PostAuthHook file:"%D/scripts/eap_anon_hook.pl"
	PostProcessingHook file:"%D/scripts/eap_acct_username.pl"
</Handler>

<Handler TunnelledByTTLS=1, Client-Identifier=airespace>
	AuthByPolicy ContinueUntilAccept

      # Strip realm if in MSN format
      RewriteUsername s/(.*)\\(.*)/$2/

	#AuthBy LDAPAuthentication
	
	<AuthBy LSA>
		Domain clinlan
		#Group Domain Users
		#DomainController zulu
		EAPType MSCHAP-V2
	</AuthBy>

      <AuthBy UNIX>
		GroupFilename %D/group
		# anonymous-PEAP must be in here:
		Filename %D/radauth_pass.wlan
	</AuthBy>

	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
	PostAuthHook file:"%D/scripts/eap_anon_hook.pl"
	PostProcessingHook file:"%D/scripts/eap_acct_username.pl"
</Handler>

<Handler Client-Identifier=airespace,Called-Station-Id=/muscwep/i>
	AuthByPolicy ContinueUntilAccept
	AddToRequestIfNotExist Framed-IP-Address=%{Calling-Station-Id}
	StripFromRequest Class
        
	<AuthBy FILE>
		Filename %D/users
		EAPType TTLS, PEAP
		EAPTLS_CAFile %D/certificates/production/ca-bundle.crt
		EAPTLS_CertificateFile %D/certificates/production/%h_ips.pem	
		EAPTLS_CertificateType PEM
		EAPTLS_PrivateKeyFile %D/certificates/production/%h_ips.pem
		EAPTLS_PrivateKeyPassword putyoursecrethere
		EAPTLS_VerifyDepth 3
		EAPTLS_MaxFragmentSize 1000
		AutoMPPEKeys
		SSLeayTrace 4
		EAPTLS_PEAPVersion 1
		EAPTLS_PEAPBrokenV1Label
	</AuthBy>
	PreProcessingHook file:"%D/scripts/eap_anon_hook.pl"
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
</Handler>

<Handler Client-Identifier=airespace,Called-Station-Id=/c3wep/i>
	AuthByPolicy ContinueUntilAccept
	AddToRequestIfNotExist Framed-IP-Address=%{Calling-Station-Id}
	StripFromRequest Class
        
	<AuthBy FILE>
		Filename %D/users
		EAPType PEAP,TTLS
		EAPTLS_CAFile %D/certificates/production/dc1_ca.cer
		EAPTLS_CertificateFile %D/certificates/production/%h_dc1.pem	
		EAPTLS_CertificateType PEM
		EAPTLS_PrivateKeyFile %D/certificates/production/%h_dc1.pem
		EAPTLS_PrivateKeyPassword putyoursecrethere
		EAPTLS_VerifyDepth 3
		EAPTLS_MaxFragmentSize 1000
		AutoMPPEKeys
		SSLeayTrace 4
		EAPTLS_PEAPVersion 1
		EAPTLS_PEAPBrokenV1Label
	</AuthBy>
	PreProcessingHook file:"%D/scripts/eap_anon_hook.pl"
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
</Handler>


<Handler Client-Identifier=airespace,Called-Station-Id=/muscsecure/i>
	AuthByPolicy ContinueUntilAccept
	AddToRequestIfNotExist Framed-IP-Address=%{Calling-Station-Id}
	StripFromRequest Class
        
	<AuthBy FILE>
		Filename %D/users
		EAPType PEAP,TTLS
		EAPTLS_CAFile %D/certificates/production/verisign-combo.crt
		EAPTLS_CertificateFile %D/certificates/production/%h.pem	
		EAPTLS_CertificateType PEM
		EAPTLS_PrivateKeyFile %D/certificates/production/%h.pem
		EAPTLS_PrivateKeyPassword putyoursecrethere
		EAPTLS_VerifyDepth 3
		EAPTLS_MaxFragmentSize 1000
		AutoMPPEKeys
		SSLeayTrace 4
		EAPTLS_PEAPVersion 1
		EAPTLS_PEAPBrokenV1Label
	</AuthBy>

	PreProcessingHook file:"%D/scripts/eap_anon_hook.pl"
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
</Handler>

<Handler Client-Identifier=airespace,Called-Station-Id=/devnet/i>
	AuthByPolicy ContinueUntilAccept
	AddToRequestIfNotExist Framed-IP-Address=%{Calling-Station-Id}
	StripFromRequest Class
        
	<AuthBy FILE>
		Filename %D/users
		EAPType PEAP,TTLS
		EAPTLS_CAFile %D/certificates/production/dc1_ca.cer
		EAPTLS_CertificateFile %D/certificates/production/%h_dc1.pem	
		EAPTLS_CertificateType PEM
		EAPTLS_PrivateKeyFile %D/certificates/production/%h_dc1.pem
		EAPTLS_PrivateKeyPassword putyoursecrethere
		EAPTLS_VerifyDepth 3
		EAPTLS_MaxFragmentSize 1000
		AutoMPPEKeys
		SSLeayTrace 4
		EAPTLS_PEAPVersion 1
		EAPTLS_PEAPBrokenV1Label
	</AuthBy>

	PreProcessingHook file:"%D/scripts/eap_anon_hook.pl"
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
</Handler>


<Handler Client-Identifier=airespace>
	AuthByPolicy ContinueUntilAccept
	AddToRequestIfNotExist Framed-IP-Address=%{Calling-Station-Id}
	StripFromRequest Class
	<AuthBy UNIX>
		# anonymous-PEAP must be in here:
		GroupFilename %D/group
		Filename %D/radauth_pass.wlan
		NoEAP
	</AuthBy>
</Handler>

<Handler Client-Identifier=ppp>
	AuthByPolicy ContinueAlways
	#AuthByPolicy ContinueWhileIgnore      # Default
	<AuthBy UNIX>
		GroupFilename %D/group
		Filename %D/radauth_pass.ppp
	</AuthBy>
	#syslog functions not available on win32
	#AuthLog authlogger
	# Log accounting to a detail file
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
</Handler>

<Handler Client-Identifier=vpn>
	AuthByPolicy ContinueAlways
	# AuthByPolicy ContinueWhileIgnore      # Default

	AddToRequestIfNotExist Calling-Station-Id=%{Tunnel-Client-Endpoint}

	<AuthBy UNIX>
		GroupFilename %D/group
		Filename %D/radauth_pass.vpn
	</AuthBy>

	#syslog functions not available on win32
	#AuthLog authlogger

	# Log accounting to a detail file
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
</Handler>

<Handler Client-Identifier=hal>
	AuthByPolicy ContinueUntilAccept
	<AuthBy UNIX>
		GroupFilename %D/group
		Filename %D/passwd.nagios
	</AuthBy>
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
</Handler>