Files
wlan-ucentral-schema/schema/service.captive.uam.yml
John Crispin e594c44c89 captive.uam.mac-auth: the default was wrong
Signed-off-by: John Crispin <john@phrozen.org>
2025-09-25 18:45:05 +02:00

113 lines
2.7 KiB
YAML

description:
This section can be used to setup a captive portal on the AP with a
remote UAM server.
type: object
properties:
auth-mode:
description:
This field must be set to 'uam'
type: string
const: uam
uam-port:
description:
The local UAM port.
type: integer
maximum: 65535
minimum: 1024
default: 3990
uam-secret:
description:
The pre-shared UAM secret.
type: string
uam-server:
description:
The fqdn of the UAM server.
type: string
nasid:
description:
The NASID that gets sent to the UAM server.
type: string
nasmac:
description:
The NAS MAC that gets send to the UAM server. The devices serial is used
if this value is not provided.
type: string
auth-server:
description:
The URI of our Radius Authentication server.
type: string
format: uc-host
examples:
- 192.168.1.10
auth-port:
description:
The network port of our Radius Authentication server.
type: integer
maximum: 65535
minimum: 1024
default: 1812
auth-secret:
description:
The shared Radius authentication Authentication secret.
type: string
examples:
- secret
acct-server:
description:
The URI of our Radius Authentication server.
type: string
format: uc-host
examples:
- 192.168.1.10
acct-port:
description:
The network port of our Radius Authentication server.
type: integer
maximum: 65535
minimum: 1024
default: 1812
acct-secret:
description:
The shared Radius authentication Authentication secret.
type: string
examples:
- secret
acct-interval:
description:
The timeout used for interim messages.
type: integer
default: 600
ssid:
description:
The name of the SSID that shall be sent as part of the UAM redirect.
type: string
mac-format:
description:
Defines the format used to send the MAC address inside AAA frames.
type: string
enum:
- aabbccddeeff
- aa-bb-cc-dd-ee-ff
- aa:bb:cc:dd:ee:ff
- AABBCCDDEEFF
- AA:BB:CC:DD:EE:FF
- AA-BB-CC-DD-EE-FF
final-redirect-url:
description:
Define the behaviour off the final redirect. Default will honour "userurl" and fallback to "local".
Alternatively it is possible to force a redirect to the "UAM" or "local" URL.
type: string
enum:
- default
- uam
mac-auth:
description:
Try to authenticate new clients using macauth.
type: boolean
default: false
radius-gw-proxy:
description:
Tunnel all radius traffic via the radius-gw-proxy.
type: boolean
default: false