When built with SSL support, chilli can support the tunneling of RADIUS over TLS/SSL, otherwise known as RadSec.

Configuring for RadSec support requires the following arguments set:

sslkeyfile file

File containing the private key in PEM format.

sslcertfile file

File containing the X.509 certificate in PEM format.

sslcafile file

File containing the CA certificate in PEM format.

radiussecret radsec

Shared secret in RadSec tunnel should always be radsec (per RFC).

radsec

Option to start the chilli_radsec daemon.

See also