YRadius Module

YRadius adds support for RADIUS support in yate to bill calls using well known RADIUS billing mechanism.

The yradius module requires the cdrbuild module.

RADIUS Attributes

YRadius supports both Authentication (may be Authorization is the best term there ?) and Accounting. It doesn't support Authentification (Registration) yet.

It supports following RADIUS attributes:

  
  User-Name
  User-Password
  NAS-IP-Address
  NAS-Port
  Vendor-Specific (only for CISCO's h323-conf-id)
  Session-Timeout
  Called-Station-Id
  Calling-Station-Id
  NAS-Identifier
  Acct-Status-Type
  Acct-Delay-Time
  Acct-Session-Id
  Acct-Session-Time

The h323-conf-id is the billing id used by YATE.

You can add as many RADIUS servers you want.

Configuration File

Configuration has 3 sections. First one is general specifying the IDs of NAS. The other 2 sections are for nas and radius. Each nas section is named with words ''nasN' where N is the number of nas in this configuration, like nas1, nas2, nas3 ... nasN. But don't miss any nas in the middle. (This behavior will soon change). The radius section is for radius server, it follows similar pattern and should contain radius1, radius2, radius3 ... radiusN, respectively.

Right now one server is supported for each NAS. Option to have more backup servers will be added soon. Although you can reference same radius server sections more than once in different NAS sections.

Disabling Accounting or Authentication

By default a radius section would have both authentication and accounting enabled. But this can be controlled by disabling the feature you don't want. if you only want to bill then use:

 
  disable_auth=on

Comprehensive yradius.conf

 
[general]
nas_id=yatenas           ; identifier for this NAS
nas_ip=192.168.0.2       ; ip address of this nas
nas_port=5062            ; port to use for listening (can be anything)
priority=55


[nas1]
called_num=^1234\(.*\)$  ; number to match for authenticating/billing.
radsec=radius1           ; name of section containing info about RADIUS server, defined later
authfailnum=1235         ; number to route to if authfails.
autherrnum=1236          ; number to route to if some other error occurs

[radius1]
server=192.168.0.2       ; address of RADIUS server
auth_port=1812           ; auth port for radius server
acct_port=1813           ; acct port for radius server
secret=nassecret         ; shared secret with RADIUS server
;disable_auth=on         ; disable auth for this radius server
;disable_acct=on         ; disable accounting for this radius server
timeoutsecs = 5          ; timeout for receiving reply from server
retries = 2              ; retries to send auth or acct packets