Is radsec going to be a possibility?

[aglabs]

Hello,

Been a huge fan of what Alta Labs has accomplished in the short time they been around, I love how the stuff just works.

I was wondering if there is any news to share on radsec support for both wired and wireless side of things.

After some searching I found some older AP release notes: AP - Release Notes (Version 2.0v) there appears to be initial work done to make radsec possible, but couldn’t find anything further.

[Alta-Jeff]

We do support Radsec on the APs themselves!

Here is an example of how it could be done, with Orion (this is the power-user config):

{
“radsec”: {
“tls”: {
“default”: {
“cacerts”: {
“0de90ce2.0”:
“-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----”,
“238d1594.0”:
“-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----”,
“572c865c.0”:
“-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----”,
“e9f4548c.0”:
“-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----”,
“bw.radsec.cacert.pem”:
“-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----”,
“openroaming.root.cacert.pem”:
“-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----”
},
“cert”:
“-----BEGIN CERTIFICATE-----
INSERT YOUR CERT HERE
-----END CERTIFICATE-----”,
“key”:
“-----BEGIN EC PRIVATE KEY-----
INSERT YOUR KEY HERE
-----END EC PRIVATE KEY-----”
}
},
“realms”: {
“*”: {
“servers”: [ “216.239.34.91” ],
“tls”: “default”
}
}
},
“hostapd”: "
hs20=1
disable_dgaf=1
hs20_oper_friendly_name=eng:Orion
interworking=1
access_network_type=2
internet=1
roaming_consortium=F4F5E8F5F4
anqp_3gpp_cell_net=310,410;310,280;310,150;313,100
radius_acct_interim_interval=300
venue_name=eng:My Venue
domain_name=orionwifi.com
"
}