SoftEther RADIUS accounting PHP script Copyright (C) 2017 Andras Kosztyu ([email protected])

So I thought I'm not going to wait for others to finally create an accounting mod for SoftEther, and dnobori have no reason to further extend his work. This script is something I wrote in a weekend so I could integrate SoftEther into other parts of my system that already fully use RADIUS.

How does this work? The SoftEther server sends HUB security logs to a remote Syslog-ng server, which execute the scripts when the filter matches. These scripts do accounting start and stop, while interim update is done through cron. The parsing of the syslog is adjusted to english logs, with the softether using DHCP.

The scripts are created for my needs, it is not guaranteed to work with your settings. They are not optimized and have not been tested in production environment.

Ubuntu apt-get install php-sqlite3 php-cli freeradius-utils syslog-ng mkdir /var/radius copy git contents to /var/radius Modify syslog-ng with provided config and restart Modify the settings.php according to need. Add the new client to the RADIUS server. Modify the SoftEther to send syslog to the syslog-ng server. If required, setup firewall rules to accept syslog data Profit.

CentOS/Fedora

1. Install a syslog-ng server and create new listener based on the example ( syslog-ng_softether.conf). (cd /root && wget http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm && rpm -Uvh /root/epel-release-7-5.noarch.rpm && yum -y install syslog-ng )

2. Install PHP, SQLite and place the PHP files somewhere. ( yum install php php-pdo -y && mkdir /var/radius )

3. Install radius client utility.( yum install freeradius-utils -y)

4. Modify the settings.php according to need. Add the new client to the RADIUS server.

5. Restart syslog-ng server.

6. Modify the SoftEther to send syslog to the syslog-ng server.

7. Disable SELinux (!!!)

8. Profit.

For interim RADIUS updates, setup a crontab with interim.php. For archiving old log files, setup a crontab with archive.php, it will gzip every logfile older than 1 day and remove older than 365 days.