Page MenuHomeVyOS Platform

Openvpn Radius authentication support
Open, WishlistPublicFEATURE REQUEST

Description

Debian Buster has a plugin for Openvpn Radius auth:

https://packages.debian.org/buster/openvpn-auth-radius

Maybe it is working by passing raw OpenVPN options to OpenVPN with openvpn-option keyword, but proper cli support would be great.

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Event Timeline

erkin set Issue type to Feature (new functionality).Aug 30 2021, 5:49 AM
erkin removed a subscriber: Active contributors.
c-po triaged this task as Wishlist priority.

Both VyOS 1.4 and VyOS 1.3 already have that plugin installed so you can start using it with the openvpn-option method.

The authentication CLI system should be migrated to something like:

  • set interfaces openvpn vtun10 authentication client username <- when acting in OpenVPN client mode
  • set interfaces openvpn vtun10 authentication client password
  • set interfaces openvpn vtun10 authentication mode <radius | ldap> <- for the RADIUS and or LDAP auth plugin
  • set interfaces openvpn vtun10 authentication radius server <x.x.x.x> <- See IPSec IKEv2 remote-access VPN as example to reuse a given CLI definition
c-po added a subscriber: c-po.