summaryrefslogtreecommitdiff
path: root/interface-definitions/system-login-radius.xml.in
blob: c5d0813560a95c388b799e13f1f6ac6d2494c40b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
<?xml version="1.0"?>
<interfaceDefinition>
  <node name="system">
    <children>
      <node name="login">
        <children>
          <node name="radius" owner="${vyos_conf_scripts_dir}/system-login-radius.py">
            <properties>
              <help>RADIUS based user authentication</help>
            </properties>
            <children>
              <leafNode name="source-address">
                <properties>
                  <help>RADIUS client source address</help>
                  <valueHelp>
                    <format>ipv4</format>
                    <description>TFTP IPv4 listen address</description>
                  </valueHelp>
                  <constraint>
                    <validator name="ipv4-address"/>
                  </constraint>
                </properties>
              </leafNode>
              <tagNode name="server">
                <properties>
                  <help>RADIUS server configuration</help>
                  <valueHelp>
                    <format>ipv4</format>
                    <description>RADIUS server IPv4 address</description>
                  </valueHelp>
                  <constraint>
                    <validator name="ipv4-address"/>
                  </constraint>
                </properties>
                <children>
                  <leafNode name="disable">
                    <properties>
                      <help>Temporary disable this server</help>
                      <valueless/>
                    </properties>
                  </leafNode>
                  <leafNode name="key">
                    <properties>
                      <help>Shared secret key</help>
                    </properties>
                  </leafNode>
                  <leafNode name="port">
                    <properties>
                      <help>Authentication port</help>
                      <valueHelp>
                        <format>1-65535</format>
                        <description>Numeric IP port (default: 1812)</description>
                      </valueHelp>
                      <constraint>
                        <validator name="numeric" argument="--range 1-65535"/>
                      </constraint>
                    </properties>
                  </leafNode>
                  <leafNode name="timeout">
                    <properties>
                      <help>Session timeout</help>
                      <valueHelp>
                        <format>1-30</format>
                        <description>Session timeout in seconds (default: 2)</description>
                      </valueHelp>
                      <constraint>
                        <validator name="numeric" argument="--range 1-30"/>
                      </constraint>
                      <constraintErrorMessage>Timeout must be between 1 and 30 seconds</constraintErrorMessage>
                    </properties>
                  </leafNode>
                </children>
              </tagNode>
            </children>
          </node>
        </children>
      </node>
    </children>
  </node>
</interfaceDefinition>