yate/conf.d/yradius.conf.sample

156 lines
3.9 KiB
Plaintext

[general]
; set global parameters of the RADIUS client
; enabled: bool: Enable the RADIUS module
;enabled=true
; addr: ipaddress: IP address to bind to - must be set to enable, 0.0.0.0 is OK
;addr=
; port: integer: UDP port to bind to, must be non-zero
;port=1810
; single_socket: bool: Share the socket for requests (not recommended)
;single_socket=false
; local_time: bool: Use local timestamps instead of GMT
;local_time=false
; short_number: bool: Prefer to use parameter "called" over "calledfull"
;short_number=false
; auth_priority: integer: Priority of the user.auth handler
;auth_priority=70
; acct_priority: integer: Priority of the call.cdr handler
;acct_priority=70
; print_attributes: bool: Print returned attributes on debug level ALL
;print_attributes=false
; cisco_format: bool: Add hardcoded attributes in Cisco format
;cisco_format=true
; quintum_format: bool: Add hardcoded attributes in Quintum format
;quintum_format=true
; NOTE: The Cisco and Quintum attributes can be enabled both at the same time
; and the hardcoded attributes will be added as Cisco and Quintum attributes
[portabill]
; Settings related to interoperation with PortaOne's PortaBill
; enabled: bool: Enable handling of the routing parameters
;enabled=no
; parallel: bool: Make outgoing calls in parallel instead of sequence
;parallel=no
; simplify: bool: Simplify returned partial URIs by stripping parameters
;simplify=no
; maxcall: int: Maximum time to wait until call is answered in milliseconds
;maxcall=
; stoperror: string: Regular expression matching the names of the errors
; that will terminate the entire call, not just one route
;stoperror=busy
;[nas]
;There can be several sections named [nas] or [nas SOMETHING]
; rad_auth: bool: Enable authentication on this virtual NAS
;rad_auth=yes
; rad_acct: bool: Enable accounting on this virtual NAS
;rad_acct=yes
; rad_server: string: Name of the server to use, default [radius SOMETHING]
;rad_server=
; add: will add an attribute to the RADIUS request
;add:attribute-name=EXPRESSION
;add:subtype:attribute-name=EXPRESSION
; set: will set message parameters
;set:paramname=EXPRESSION
; ret: will set authentication returned attributes back into message
;ret:attribute-name=paramname
; ret-fail: will set returned attributes from auth rejection back into message
;ret-fail:attribute-name=paramname
; Any other parameter will attempt to match the right hand Regexp
;paramname=REGEXP
[nas register]
; Sample SIP REGISTER authentication NAS
rad_acct=false
rad_server=common
protocol=sip
method=REGISTER
add:Service-Type=15
add:Cisco-AVPair=h323-session-protocol=sipv2
[nas invite]
; Sample SIP INVITE authentication NAS
rad_acct=false
rad_server=common
protocol=sip
method=INVITE
add:Service-Type=15
add:Cisco-AVPair=h323-session-protocol=sipv2
; PortaOne specific
;add:Cisco-AVPair=h323-ivr-out=PortaBilling_Routing:SIP
[nas auth]
; Sample authentication NAS
; Settings and matching rules specific to this virtual Network Access Server
rad_acct=no
rad_server=common
; Some RADIUS attributes you're likely to set
add:Service-Type=8
[nas acct]
; Sample accounting NAS
; Settings and matching rules specific to this virtual Network Access Server
rad_auth=no
rad_server=common
; Some RADIUS attributes you're likely to set
add:h323-disconnect-cause=${cause_q931}
add:Acct-Delay-Time=0
[radius common]
; Settings specific to this RADIUS server
; server: ipaddress: IP address of the server - must be set
;server=
; secret: string: Secret token (password) used to authenticate to the server
;secret=
; auth_port: integer: UDP port used by the server for authentication
;auth_port=1812
; acct_port: integer: UDP port used by the server for accounting
;acct_port=1813
; timeout: integer: How much to wait for an answer from the server (milliseconds)
;timeout=2000
; retries: integer: How many attempts to make until timing out
;retries=2
; Some RADIUS attributes you're likely to set
add:Cisco-NAS-Port=${chan}
add:NAS-Identifier=Yate
;add:NAS-IP-Address=