Page MenuHomeVyOS Platform

Openvpn Radius authentication support
Closed, ResolvedPublicFEATURE REQUEST

Description

Debian Buster has a plugin for Openvpn Radius auth:

https://packages.debian.org/buster/openvpn-auth-radius

Maybe it is working by passing raw OpenVPN options to OpenVPN with openvpn-option keyword, but proper cli support would be great.

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Event Timeline

erkin set Issue type to Feature (new functionality).Aug 30 2021, 5:49 AM
erkin removed a subscriber: Global Notifications.
c-po triaged this task as Wishlist priority.

Both VyOS 1.4 and VyOS 1.3 already have that plugin installed so you can start using it with the openvpn-option method.

The authentication CLI system should be migrated to something like:

  • set interfaces openvpn vtun10 authentication client username <- when acting in OpenVPN client mode
  • set interfaces openvpn vtun10 authentication client password
  • set interfaces openvpn vtun10 authentication mode <radius | ldap> <- for the RADIUS and or LDAP auth plugin
  • set interfaces openvpn vtun10 authentication radius server <x.x.x.x> <- See IPSec IKEv2 remote-access VPN as example to reuse a given CLI definition