TOUGHRADIUS
Wiki
  • README
  • Security Update: XSS Vulnerability Fix
  • config
  • docker
  • freeRADIUS integration
  • tr069
    • tr069_events
  • common
    • XMLX
  • docs
    • documents
      • Explanation of nouns
      • Mikrotik TR069 Client Setup for ToughRADIUS
      • ToughRADIUS Defined TR069 Preset Template
      • Introduction to BRAS
      • The Cisco BRAS device is connected to the ToughRADIUS server
      • ToughRADIUS Configuration
      • database
      • ToughRADIUS Docker Quick Deployment
      • ToughRADIUS 对 EAP 认证方法的支持
      • FreeRadius rest module Configuration
      • freeRADIUS integration
      • ## H3C 设备配置对接 ToughRADIUS
      • Huawei device configuration and interconnection ToughRADIUS
      • ToughRADIUS Quick start
      • ToughRADIUS 常见问题
      • Docker-compose 部署
      • ToughRADIUS Data Model
      • tr069_cert
      • Event type (meaning corresponding to EVENT CODE)
      • Mikrotik TR069 Client Setup for ToughRADIUS
      • zh-cn
        • ToughRADIUS 快速安装指南
Powered by GitBook
On this page
  • TOUGHRADIUS
  • System structure
  • System features
  • Links
  • Contribute

Was this helpful?

Edit on GitHub
  1. docs

documents

PreviousdocsNextExplanation of nouns

Last updated 1 year ago

Was this helpful?

Welcome to the TOUGHRADIUS project!

 _____   _____   _   _   _____   _   _   _____        ___   _____   _   _   _   _____  
|_   _| /  _  \ | | | | /  ___| | | | | |  _  \      /   | |  _  \ | | | | | | /  ___/ 
  | |   | | | | | | | | | |     | |_| | | |_| |     / /| | | | | | | | | | | | | |___  
  | |   | | | | | | | | | |  _  |  _  | |  _  /    / / | | | | | | | | | | | | \___  \ 
  | |   | |_| | | |_| | | |_| | | | | | | | \ \   / /  | | | |_| | | | | |_| |  ___| | 
  |_|   \_____/ \_____/ \_____/ |_| |_| |_|  \_\ /_/   |_| |_____/ |_| \_____/ /_____/ 

TOUGHRADIUS

TOUGHRADIUS is committed to providing comprehensive and superior network management solutions. The core technology is based on RADIUS and can extend the system functions to support various network protocols, such as TR069. TOUGHRADIUS not only provides a user-friendly system interface, but also powerful data analysis and management features such as real-time network monitoring, usage reports and automatic billing. TOUGHRADIUS is dedicated to providing secure, reliable and efficient network management services, enabling them to realize more efficient network operations.

TOUGHRADIUS uses advanced Golang technology to develop the system core, providing excellent system performance and easy deployment experience.

System structure

architecture

System features

TR069 ACS

TR069 ACS can provide real-time monitoring and maintenance of CPE devices in the network to ensure their normal operation. It supports multiple data models and allows custom Settings to accommodate different types of CPE devices. In addition, TR069 ACS also supports secure encryption to protect data privacy and security. Therefore, TR069 ACS not only improves the efficiency of network management, but also ensures network security.

  • Configure or get device configuration parameters and operating status

  • Provide vendor device configuration download

  • Provide device factory reset configuration download

  • Provide upgrade firmware download

Radius Server

TOUGHRADIUS is a RADIUS server that supports the RADIUS protocol and the RADIUS over TLS (RadSec) protocol. Also supports some EAP authentication methods

Standard RADIUS features

  • Authentication message

  • Authentication PAP authentication method

  • Authentication CHAP authentication method

  • Authentication MS-CHAPv2 authentication method

  • Authentication EAP-MD5 authentication method

  • Authentication EAP-MS-CHAPv2 authentication method

  • Authorization message

    After receiving the BAS Authentication request message, the RADIUS Server encapsulates the user authorization information according to the user information resources, and authorizes the user bandwidth limit, maximum duration, IP and other information to the BAS through the Authentication response message.

  • Accounting-On message

  • Accounting-Off message

  • Accounting-Start message

  • Accounting-Interium-Update message

  • Accounting-Stop message

  • Deliver the SessionTimeout attribute

  • Deliver the AcctInterimInterval attribute

  • Deliver the FramedPool attribute

  • Deliver the FramedIPAddress attribute

  • Deliver attributes of the customized vendor,such as Huawei, ZTE, Cisco,Mikrotik etc.

freeRADIUS integration

TOUGHRADIUS integrates with the FreeRADIUS API interface, extending its already comprehensive authentication capabilities to provide a more robust solution. Integration with the FreeRADIUS API enables seamless integration with existing network infrastructures, providing a wider range of authentication options to meet unique requirements. Whether you need to support 802.1X, Wi-Fi, VPNs or other network access protocols, TOUGHRADIUS has you covered. With advanced authentication capabilities and integration with FreeRADIUS, users can enjoy a secure, reliable and efficient network management experience.

Northbound Interface

  • Provide a unified API for various third-party management systems, based on the HTTPS Json protocol.

  • Provide basic equipment information and status data query API, and data maintenance API.

  • Provide various policy management APIs, such as firewall rules, routing tables, etc.

Links

Contribute

We welcome contributions of any kind, including but not limited to issues, pull requests, documentation, examples, etc.

freeradius-toughradius

Home
TOUGHRADIUS Documentation
TLS encryption for RADIUS over TCP (RadSec) 00)
TLS encryption for RADIUS over TCP (RadSec) 05
mikrotik RADIUS Client
quick Start