DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Configure radius parameters from command line?

  • john rumm
  • Topic Author
  • User
  • User
More
01 Mar 2018 23:30 #1 by john rumm
I want to set the external radius server details (i.e. those settings under the Applications->RADIUS bit of the web management interface).

Does anyone know a command line option for doing this? (need to do a setup on on a whole bunch of 2830s and 2860s...)

Please Log in or Create an account to join the conversation.

More
02 Mar 2018 17:33 #2 by admin3
The Vigor 2860's PDF manual on the website should have a telnet command reference, it looks like the "radius" command might work for what you're doing, but it has a lot of options, so the telnet reference should help.



Forum Administrator

Please Log in or Create an account to join the conversation.

  • john rumm
  • Topic Author
  • User
  • User
More
03 Mar 2018 11:56 #3 by john rumm
Thanks for that... I had looked at the generic CLI manual and tried various things in the CLI on a 2830, but found nothing. A bit of experimentation on a 2860 shows that the radius command will do what I need on that model[1], but alas it does not seem to be present on a 2830.

[1] basically just point it at an external radius server so that I can authenticate wifi users.

So It looks like :

> radius external -e 1
> radius external -i <external server ip>
> radius external -p 1812
> radius external -s <shared secret>

(plus a bunch of commands to create a new SSID on the wifi and setup its security)

will do it for the 2860s... (although typically I have fewer of those to configure!)

Cheers,
John

Please Log in or Create an account to join the conversation.

  • john rumm
  • Topic Author
  • User
  • User
More
15 Jan 2019 11:44 #4 by john rumm
Just thought it might be handy to post a conclusion to this...

The 2830 does not have the command required, however I found that you can get at the settings using the tr069 parameters instead:

The relevant variables are:

InternetGatewayDevice.X_00507F_Applications.Radius.Enable
InternetGatewayDevice.X_00507F_Applications.Radius.ServerIP
InternetGatewayDevice.X_00507F_Applications.Radius.DestPort
InternetGatewayDevice.X_00507F_Applications.Radius.SharedSecret

So you would need a command sequence like:

sys tr069 set InternetGatewayDevice.X_00507F_Applications.Radius.Enable 1
sys tr069 set InternetGatewayDevice.X_00507F_Applications.Radius.ServerIP <ip address here>
sys tr069 set InternetGatewayDevice.X_00507F_Applications.Radius.DestPort 1812
sys tr069 set InternetGatewayDevice.X_00507F_Applications.Radius.SharedSecret <shared secret here>


Cheers,
John

Please Log in or Create an account to join the conversation.