Hi Joseph,
if you are using mod_xml_radius , i am not sure how your Dialplan is , but if you are not missing you have to include file from mod_xml_radius source in your dialplan.
00_dialplan_auth.xml 
When we were using VCS , both ip/user authentication worked well .

On Tue, Jun 20, 2017 at 11:46 PM, Joseph Waite <joelists@tm.net.uk> wrote:
One question. the docs in confluence seem to indicate that it can only be used for user/pass authentication and not IP authentication. Is this correct?

On 20 Jun 2017, at 19:28, Tihomir Culjaga <tculjaga@gmail.com> wrote:

i build that module few years ago and it still works as a charm :P

have fun,
Tihomir.

On 20 June 2017 at 20:24, Tihomir Culjaga <tculjaga@gmail.com> wrote:
mod_rad_auth if you want just to authenticate.

its an application that you can trigger in dialplan regradless if its an incoming or outgoing call ..

On 20 June 2017 at 20:22, Joseph Waite <joelists@tm.net.uk> wrote:
There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius!

FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius

On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com> wrote:

you can add cidr attribute for all users

вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk>:
I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.


On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com> wrote:

When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message.
Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.

вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk>:
I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.


On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com> wrote:

You can try mod_xml_radius and generate directory record with cidr adribute.


вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk>:
Hi Guys

I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.

If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.

Any help would be most appreciated.

 Regards







_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org