[Chilli] hostapd radius accounting via coova chilli

[Alexander Szlezak]

Dear all,

I've configured hostapd on an openwrt 10.03 backfire to access point to 
report via radius to coovachilli.

My goal is to have the connect/disconnect events of wlan clients 
available in chilli/radius db.

Hostapd is reporting properly (checked via tcpdump), but allways gets a 
"connection refused" when trying to reach coovachilli.

First I had chilli radiusproxy running on 1812/1813 and it conflicted 
with the local freeradius, but still on another port coovachilli does 
not seem to open the radiusproxy port.


Configuration on Chilli (/etc/chilli/default)

HS_RADPROXY=on
HS_RADPROXY_LISTEN=172.31.0.1
HS_RADPROXY_CLIENT=172.31.0.0/16
HS_RADPROXY_PORT=1651
HS_RADPROXY_SECRET=$HS_RADSECRET
HS_RADPROXY_MACACCEPT=on
HS_RADPROXY_LOCATTR=32


Configuration on OpenWRT:


ctrl_interface=/var/run/hostapd-phy0
driver=nl80211
wmm_ac_bk_cwmin=4
wmm_ac_bk_cwmax=10
wmm_ac_bk_aifs=7
wmm_ac_bk_txop_limit=0
wmm_ac_bk_acm=0
wmm_ac_be_aifs=3
wmm_ac_be_cwmin=4
wmm_ac_be_cwmax=10
wmm_ac_be_txop_limit=0
wmm_ac_be_acm=0
wmm_ac_vi_aifs=2
wmm_ac_vi_cwmin=3
wmm_ac_vi_cwmax=4
wmm_ac_vi_txop_limit=94
wmm_ac_vi_acm=0
wmm_ac_vo_aifs=2
wmm_ac_vo_cwmin=2
wmm_ac_vo_cwmax=3
wmm_ac_vo_txop_limit=47
wmm_ac_vo_acm=0
tx_queue_data3_aifs=7
tx_queue_data3_cwmin=15
tx_queue_data3_cwmax=1023
tx_queue_data3_burst=0
tx_queue_data2_aifs=3
tx_queue_data2_cwmin=15
tx_queue_data2_cwmax=63
tx_queue_data2_burst=0
tx_queue_data1_aifs=1
tx_queue_data1_cwmin=7
tx_queue_data1_cwmax=15
tx_queue_data1_burst=3.0
tx_queue_data0_aifs=1
tx_queue_data0_cwmin=3
tx_queue_data0_cwmax=7
tx_queue_data0_burst=1.5
hw_mode=g
channel=1
ieee80211n=1
ht_capab=[HT20][SHORT-GI-20][SHORT-GI-40][TX-STBC][RX-STBC1][DSSS_CCK-40]
interface=wlan0
ap_isolate=1
auth_algs=1
wpa=0
ssid=xxxx
bridge=br-lan
wmm_enabled=1
bssid=00:27:22:06:6B:F3
ignore_broadcast_ssid=0
#ieee8021x=1
#auth_algs=1
#eap_server=0
#eapol_key_index_workaround=1
own_ip_addr=172.31.0.178 # ip of the openvpn management tunnel interface 
connected to the openvpn server
nas_identifier=ap
#auth_server_addr=172.31.0.1 # Where is the radius server
#auth_server_port=1651      # The port the radius server runs on
#auth_server_shared_secret=xxxx
acct_server_addr=172.31.0.1
acct_server_port=1651
acct_server_shared_secret=xxxx
-- 
Follow me on Twitter @ http://twitter.com/magicshark
__________________________________________________________________
Mag. Alexander SZLEZAK                            Unwired Networks
Inhaber
Tel.: +43 699 13504101                           Reischergasse 6/2
Fax.: +43 720 345179                        A-1130 Vienna, Austria