[Freeswitch-users] Radius auth based on IP without sending 407 Proxy authentication required

Tihomir Culjaga tculjaga at gmail.com
Tue Jun 20 18:24:43 UTC 2017


mod_rad_auth if you want just to authenticate.

its an application that you can trigger in dialplan regradless if its an
incoming or outgoing call ..

On 20 June 2017 at 20:22, Joseph Waite <joelists at tm.net.uk> wrote:

> There are no users configured on FreeSwitch, all user config is done on
> JeraSoft VCS and FreeSwitch authenticates via radius!
>
> FreeSwitch should allow an INVITE from any IP, not send 407, but
> authenticate via Radius
>
> On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov at gmail.com> wrote:
>
> you can add cidr attribute for all users
>
> вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists at tm.net.uk>:
>
>> I don’t want to allow certain users, I want all calls that come in on
>> this Sofia profile to not send the 407 but still authenticate via Radius
>> based on the IP.
>>
>>
>> On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov at gmail.com> wrote:
>>
>> When you generate manually ACL with trusted IP or via mod_xml_radius then
>> you can accept call without 407 message.
>> Also if you add cird attribute to user directory then FreeSwitch can map
>> call to user via cidr attribute.
>>
>> вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists at tm.net.uk>:
>>
>>> I am using mod_xml_radius, however my issue is that if I enable
>>> auth_calls in profile it sends a 407 Proxy Authentication Required sip
>>> message, and if I set auth_calls to false it doesn’t authenticate with
>>> Radius, it simply passes call straight into the dial plan.
>>>
>>>
>>> On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov at gmail.com> wrote:
>>>
>>> You can try mod_xml_radius and generate directory record with cidr
>>> adribute.
>>>
>>> вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists at tm.net.uk>:
>>>
>>>> Hi Guys
>>>>
>>>> I am trying to configure a Sofia Profile that will not send a 407 Proxy
>>>> Authentication Required, but will still authenticate the incoming invite
>>>> via Radius based on the IP address of the INVITE.
>>>>
>>>> If I change the Auth_calls to false on the Sofia profile, it doesn’t
>>>> send the 407, but then it doesn’t authenticate the call.
>>>>
>>>> Any help would be most appreciated.
>>>>
>>>> Regards
>>>> ____________________________________________________________
>>>> _____________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/
>>>> options/freeswitch-users
>>>> http://www.freeswitch.org
>>>
>>> ____________________________________________________________
>>> _____________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>>
>>> ____________________________________________________________
>>> _____________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20170620/09271fb6/attachment-0001.html>


More information about the FreeSWITCH-users mailing list