Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configuring Your FreeRADIUS Device to Communicate with JSA

You must have a working knowledge of syslog configuration and the Linux distribution.

Configure FreeRADIUS to send logs to the syslog daemon of the host and configure the daemon to send events to JSA.

FreeRADIUS has multiple distributions. Some files might not be in the same locations that are described in this procedure. For example, the location of the FreeRADIUS startup script is based on distribution. Conceptually, the configuration steps are the same for all distributions.

  1. Log in to the system that hosts FreeRADIUS.
  2. Edit the /etc/freeradius/radius.conf file.
  3. Change the text in the file to match the following lines:
  4. Edit the /etc/syslog.conf file.
  5. To configure log options, add the following text.
    # .=notice logs authentication messages (L_AUTH).

    # <facility_name>.=notice @<IP_address_of_JSA_Event_Collector_or_JSA_Console>
    # .=err logs module errors for FreeRADIUS.

    #<facility_name>.=err @<IP_address_of_JSA_Event_Collector_or_JSA_Console>
    # .* logs messages to the same target.

    # <facility_name>.* @<IP_address_of_JSA_Event_Collector_or_JSA_Console>

    An example syslog facility name is local1. You can rename it.

    To configure a log option, remove the comment tag (#) from one of the active lines that contains an @ symbol.

  6. If the configuration change does not load automatically, restart the syslog daemon. The method to restart the syslog daemon depends on the distribution that is used. The following table lists possible methods.

    Operating system distribution

    Command to restart daemon

    Red Hat Enterprise Linux

    service syslog restart

    Debian Linux or Ubuntu Linux

    /etc/init.d/syslog restart

    FreeBSD operating system

    /etc/rc.d/syslogd restart
  7. Add the following options to the FreeRADIUS startup script:

    • -l syslog

    • -g <facility_name>

    The -g value must match the facility name in Step 5.

  8. Restart FreeRADIUS.