@serve.zone/dcrouter 13.17.0 → 13.17.3

package/dist_ts/radius/classes.radius.server.js

@@ -0,0 +1,384 @@
+import * as plugins from '../plugins.js';
+import { logger } from '../logger.js';
+import { VlanManager } from './classes.vlan.manager.js';
+import { AccountingManager } from './classes.accounting.manager.js';
+/**
+ * RADIUS Server wrapper that provides:
+ * - MAC Authentication Bypass (MAB) for network devices
+ * - VLAN assignment based on MAC address
+ * - Accounting for session tracking and billing
+ * - Integration with SmartProxy routing
+ */
+export class RadiusServer {
+    radiusServer;
+    vlanManager;
+    accountingManager;
+    config;
+    clientSecrets = new Map();
+    running = false;
+    // Statistics
+    stats = {
+        authRequests: 0,
+        authAccepts: 0,
+        authRejects: 0,
+        accountingRequests: 0,
+        startTime: 0,
+    };
+    constructor(config) {
+        this.config = {
+            authPort: config.authPort ?? 1812,
+            acctPort: config.acctPort ?? 1813,
+            bindAddress: config.bindAddress ?? '0.0.0.0',
+            ...config,
+        };
+        // Initialize VLAN manager
+        this.vlanManager = new VlanManager(config.vlanAssignment);
+        // Initialize accounting manager
+        this.accountingManager = new AccountingManager(config.accounting);
+    }
+    /**
+     * Start the RADIUS server
+     */
+    async start() {
+        if (this.running) {
+            logger.log('warn', 'RADIUS server is already running');
+            return;
+        }
+        logger.log('info', `Starting RADIUS server on ${this.config.bindAddress}:${this.config.authPort} (auth) and ${this.config.acctPort} (acct)`);
+        // Initialize managers
+        await this.vlanManager.initialize();
+        await this.accountingManager.initialize();
+        // Import static VLAN mappings if provided
+        if (this.config.vlanAssignment?.mappings) {
+            await this.vlanManager.importMappings(this.config.vlanAssignment.mappings);
+        }
+        // Build client secrets map
+        this.buildClientSecretsMap();
+        // Create the RADIUS server
+        this.radiusServer = new plugins.smartradius.RadiusServer({
+            authPort: this.config.authPort,
+            acctPort: this.config.acctPort,
+            bindAddress: this.config.bindAddress,
+            defaultSecret: this.getDefaultSecret(),
+            authenticationHandler: this.handleAuthentication.bind(this),
+            accountingHandler: this.handleAccounting.bind(this),
+        });
+        // Configure per-client secrets
+        for (const [ip, secret] of this.clientSecrets) {
+            this.radiusServer.setClientSecret(ip, secret);
+        }
+        // Start the server
+        await this.radiusServer.start();
+        this.running = true;
+        this.stats.startTime = Date.now();
+        logger.log('info', `RADIUS server started with ${this.config.clients.length} configured clients`);
+    }
+    /**
+     * Stop the RADIUS server
+     */
+    async stop() {
+        if (!this.running) {
+            return;
+        }
+        logger.log('info', 'Stopping RADIUS server...');
+        if (this.radiusServer) {
+            await this.radiusServer.stop();
+            this.radiusServer = undefined;
+        }
+        this.accountingManager.stop();
+        this.running = false;
+        logger.log('info', 'RADIUS server stopped');
+    }
+    /**
+     * Handle authentication request
+     */
+    async handleAuthentication(request) {
+        this.stats.authRequests++;
+        const authData = {
+            username: request.attributes?.UserName || '',
+            password: request.attributes?.UserPassword,
+            nasIpAddress: request.attributes?.NasIpAddress || request.source?.address || '',
+            nasPort: request.attributes?.NasPort,
+            nasPortType: request.attributes?.NasPortType,
+            nasIdentifier: request.attributes?.NasIdentifier,
+            calledStationId: request.attributes?.CalledStationId,
+            callingStationId: request.attributes?.CallingStationId,
+            serviceType: request.attributes?.ServiceType,
+        };
+        logger.log('debug', `RADIUS Auth Request: user=${authData.username}, NAS=${authData.nasIpAddress}`);
+        // Perform MAC Authentication Bypass (MAB)
+        // In MAB, the username is typically the MAC address
+        const result = await this.performMabAuthentication(authData);
+        if (result.success) {
+            this.stats.authAccepts++;
+            logger.log('info', `RADIUS Auth Accept: user=${authData.username}, VLAN=${result.vlanId}`);
+            // Build response with VLAN attributes
+            const response = {
+                code: plugins.smartradius.ERadiusCode.AccessAccept,
+                replyMessage: result.replyMessage,
+            };
+            // Add VLAN attributes if assigned
+            if (result.vlanId !== undefined) {
+                response.tunnelType = 13; // VLAN
+                response.tunnelMediumType = 6; // IEEE 802
+                response.tunnelPrivateGroupId = String(result.vlanId);
+            }
+            // Add session timeout if specified
+            if (result.sessionTimeout) {
+                response.sessionTimeout = result.sessionTimeout;
+            }
+            // Add idle timeout if specified
+            if (result.idleTimeout) {
+                response.idleTimeout = result.idleTimeout;
+            }
+            // Add framed IP if specified
+            if (result.framedIpAddress) {
+                response.framedIpAddress = result.framedIpAddress;
+            }
+            return response;
+        }
+        else {
+            this.stats.authRejects++;
+            logger.log('warn', `RADIUS Auth Reject: user=${authData.username}, reason=${result.rejectReason}`);
+            return {
+                code: plugins.smartradius.ERadiusCode.AccessReject,
+                replyMessage: result.rejectReason || 'Access Denied',
+            };
+        }
+    }
+    /**
+     * Handle accounting request
+     */
+    async handleAccounting(request) {
+        this.stats.accountingRequests++;
+        if (!this.config.accounting?.enabled) {
+            // Still respond even if not tracking
+            return { code: plugins.smartradius.ERadiusCode.AccountingResponse };
+        }
+        const statusType = request.attributes?.AcctStatusType;
+        const sessionId = request.attributes?.AcctSessionId || '';
+        const accountingData = {
+            sessionId,
+            username: request.attributes?.UserName || '',
+            macAddress: request.attributes?.CallingStationId,
+            nasIpAddress: request.attributes?.NasIpAddress || request.source?.address || '',
+            nasPort: request.attributes?.NasPort,
+            nasPortType: request.attributes?.NasPortType,
+            nasIdentifier: request.attributes?.NasIdentifier,
+            calledStationId: request.attributes?.CalledStationId,
+            callingStationId: request.attributes?.CallingStationId,
+            inputOctets: request.attributes?.AcctInputOctets,
+            outputOctets: request.attributes?.AcctOutputOctets,
+            inputPackets: request.attributes?.AcctInputPackets,
+            outputPackets: request.attributes?.AcctOutputPackets,
+            sessionTime: request.attributes?.AcctSessionTime,
+            terminateCause: request.attributes?.AcctTerminateCause,
+            serviceType: request.attributes?.ServiceType,
+        };
+        try {
+            switch (statusType) {
+                case plugins.smartradius.EAcctStatusType.Start:
+                    logger.log('debug', `RADIUS Acct Start: session=${sessionId}, user=${accountingData.username}`);
+                    await this.accountingManager.handleAccountingStart(accountingData);
+                    break;
+                case plugins.smartradius.EAcctStatusType.Stop:
+                    logger.log('debug', `RADIUS Acct Stop: session=${sessionId}`);
+                    await this.accountingManager.handleAccountingStop(accountingData);
+                    break;
+                case plugins.smartradius.EAcctStatusType.InterimUpdate:
+                    logger.log('debug', `RADIUS Acct Interim: session=${sessionId}`);
+                    await this.accountingManager.handleAccountingUpdate(accountingData);
+                    break;
+                default:
+                    logger.log('debug', `RADIUS Acct Unknown status type: ${statusType}`);
+            }
+        }
+        catch (error) {
+            logger.log('error', `RADIUS accounting error: ${error.message}`);
+        }
+        return { code: plugins.smartradius.ERadiusCode.AccountingResponse };
+    }
+    /**
+     * Perform MAC Authentication Bypass
+     */
+    async performMabAuthentication(data) {
+        // Extract MAC address from username or CallingStationId
+        const macAddress = this.extractMacAddress(data);
+        if (!macAddress) {
+            return {
+                success: false,
+                rejectReason: 'No MAC address found',
+            };
+        }
+        // Look up VLAN assignment
+        const vlanResult = this.vlanManager.assignVlan(macAddress);
+        if (!vlanResult.assigned) {
+            return {
+                success: false,
+                rejectReason: 'Unknown MAC address',
+            };
+        }
+        // Build successful result
+        const result = {
+            success: true,
+            vlanId: vlanResult.vlan,
+            replyMessage: vlanResult.isDefault
+                ? `Assigned to default VLAN ${vlanResult.vlan}`
+                : `Assigned to VLAN ${vlanResult.vlan}`,
+        };
+        // Apply any additional settings from the matched rule
+        if (vlanResult.matchedRule) {
+            // Future: Add session timeout, idle timeout, etc. from rule
+        }
+        return result;
+    }
+    /**
+     * Extract MAC address from authentication data
+     */
+    extractMacAddress(data) {
+        // Try CallingStationId first (most common for MAB)
+        if (data.callingStationId) {
+            return this.normalizeMac(data.callingStationId);
+        }
+        // Try username (often MAC address in MAB)
+        if (data.username && this.looksLikeMac(data.username)) {
+            return this.normalizeMac(data.username);
+        }
+        return null;
+    }
+    /**
+     * Check if a string looks like a MAC address
+     */
+    looksLikeMac(value) {
+        // Remove common separators and check length
+        const cleaned = value.replace(/[-:. ]/g, '');
+        return /^[0-9a-fA-F]{12}$/.test(cleaned);
+    }
+    /**
+     * Normalize MAC address format
+     */
+    normalizeMac(mac) {
+        return this.vlanManager.normalizeMac(mac);
+    }
+    /**
+     * Build client secrets map from configuration
+     */
+    buildClientSecretsMap() {
+        this.clientSecrets.clear();
+        for (const client of this.config.clients) {
+            if (!client.enabled) {
+                continue;
+            }
+            // Handle CIDR ranges
+            if (client.ipRange.includes('/')) {
+                // For CIDR ranges, we'll use the network address as key
+                // In practice, smartradius may handle this differently
+                const [network] = client.ipRange.split('/');
+                this.clientSecrets.set(network, client.secret);
+            }
+            else {
+                this.clientSecrets.set(client.ipRange, client.secret);
+            }
+        }
+    }
+    /**
+     * Get default secret for unknown clients
+     */
+    getDefaultSecret() {
+        // Use first enabled client's secret as default, or a random one
+        for (const client of this.config.clients) {
+            if (client.enabled) {
+                return client.secret;
+            }
+        }
+        return plugins.crypto.randomBytes(16).toString('hex');
+    }
+    /**
+     * Add a RADIUS client
+     */
+    async addClient(client) {
+        // Check if client already exists
+        const existingIndex = this.config.clients.findIndex(c => c.name === client.name);
+        if (existingIndex >= 0) {
+            this.config.clients[existingIndex] = client;
+        }
+        else {
+            this.config.clients.push(client);
+        }
+        // Update client secrets if running
+        if (this.running && this.radiusServer && client.enabled) {
+            if (client.ipRange.includes('/')) {
+                const [network] = client.ipRange.split('/');
+                this.radiusServer.setClientSecret(network, client.secret);
+                this.clientSecrets.set(network, client.secret);
+            }
+            else {
+                this.radiusServer.setClientSecret(client.ipRange, client.secret);
+                this.clientSecrets.set(client.ipRange, client.secret);
+            }
+        }
+        logger.log('info', `RADIUS client ${client.enabled ? 'added' : 'disabled'}: ${client.name} (${client.ipRange})`);
+    }
+    /**
+     * Remove a RADIUS client
+     */
+    removeClient(name) {
+        const index = this.config.clients.findIndex(c => c.name === name);
+        if (index >= 0) {
+            const client = this.config.clients[index];
+            this.config.clients.splice(index, 1);
+            // Remove from secrets map
+            if (client.ipRange.includes('/')) {
+                const [network] = client.ipRange.split('/');
+                this.clientSecrets.delete(network);
+            }
+            else {
+                this.clientSecrets.delete(client.ipRange);
+            }
+            logger.log('info', `RADIUS client removed: ${name}`);
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Get configured clients
+     */
+    getClients() {
+        return [...this.config.clients];
+    }
+    /**
+     * Get VLAN manager for direct access to VLAN operations
+     */
+    getVlanManager() {
+        return this.vlanManager;
+    }
+    /**
+     * Get accounting manager for direct access to accounting operations
+     */
+    getAccountingManager() {
+        return this.accountingManager;
+    }
+    /**
+     * Get server statistics
+     */
+    getStats() {
+        return {
+            running: this.running,
+            uptime: this.running ? Date.now() - this.stats.startTime : 0,
+            authRequests: this.stats.authRequests,
+            authAccepts: this.stats.authAccepts,
+            authRejects: this.stats.authRejects,
+            accountingRequests: this.stats.accountingRequests,
+            activeSessions: this.accountingManager.getStats().activeSessions,
+            vlanMappings: this.vlanManager.getStats().totalMappings,
+            clients: this.config.clients.filter(c => c.enabled).length,
+        };
+    }
+    /**
+     * Check if server is running
+     */
+    isRunning() {
+        return this.running;
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/radius/classes.vlan.manager.d.ts

@@ -0,0 +1,124 @@
+/**
+ * MAC address to VLAN mapping
+ */
+export interface IMacVlanMapping {
+    /** MAC address (full) or OUI pattern (e.g., "00:11:22" for vendor prefix) */
+    mac: string;
+    /** VLAN ID to assign */
+    vlan: number;
+    /** Optional description */
+    description?: string;
+    /** Whether this mapping is enabled */
+    enabled: boolean;
+    /** Creation timestamp */
+    createdAt: number;
+    /** Last update timestamp */
+    updatedAt: number;
+}
+/**
+ * VLAN assignment result
+ */
+export interface IVlanAssignmentResult {
+    /** Whether a VLAN was successfully assigned */
+    assigned: boolean;
+    /** The assigned VLAN ID (or default if not matched) */
+    vlan: number;
+    /** The matching rule (if any) */
+    matchedRule?: IMacVlanMapping;
+    /** Whether default VLAN was used */
+    isDefault: boolean;
+}
+/**
+ * VlanManager configuration
+ */
+export interface IVlanManagerConfig {
+    /** Default VLAN for unknown MACs */
+    defaultVlan?: number;
+    /** Whether to allow unknown MACs (assign default VLAN) or reject */
+    allowUnknownMacs?: boolean;
+}
+/**
+ * Manages MAC address to VLAN mappings with support for:
+ * - Exact MAC address matching
+ * - OUI (vendor prefix) pattern matching
+ * - Wildcard patterns
+ * - Default VLAN for unknown devices
+ */
+export declare class VlanManager {
+    private mappings;
+    private config;
+    private normalizedMacCache;
+    constructor(config?: IVlanManagerConfig);
+    /**
+     * Initialize the VLAN manager and load persisted mappings
+     */
+    initialize(): Promise<void>;
+    /**
+     * Normalize a MAC address to lowercase with colons
+     * Accepts formats: 00:11:22:33:44:55, 00-11-22-33-44-55, 001122334455
+     */
+    normalizeMac(mac: string): string;
+    /**
+     * Check if a MAC address matches a pattern
+     * Supports:
+     * - Exact match: "00:11:22:33:44:55"
+     * - OUI match: "00:11:22" (matches any device with this vendor prefix)
+     * - Wildcard: "*" (matches all)
+     */
+    macMatchesPattern(mac: string, pattern: string): boolean;
+    /**
+     * Add or update a MAC to VLAN mapping
+     */
+    addMapping(mapping: Omit<IMacVlanMapping, 'createdAt' | 'updatedAt'>): Promise<IMacVlanMapping>;
+    /**
+     * Remove a MAC to VLAN mapping
+     */
+    removeMapping(mac: string): Promise<boolean>;
+    /**
+     * Get a specific mapping by MAC
+     */
+    getMapping(mac: string): IMacVlanMapping | undefined;
+    /**
+     * Get all mappings
+     */
+    getAllMappings(): IMacVlanMapping[];
+    /**
+     * Determine VLAN assignment for a MAC address
+     * Returns the most specific matching rule (exact > OUI > wildcard > default)
+     */
+    assignVlan(mac: string): IVlanAssignmentResult;
+    /**
+     * Bulk import mappings
+     */
+    importMappings(mappings: Array<Omit<IMacVlanMapping, 'createdAt' | 'updatedAt'>>): Promise<number>;
+    /**
+     * Export all mappings
+     */
+    exportMappings(): IMacVlanMapping[];
+    /**
+     * Update configuration
+     */
+    updateConfig(config: Partial<IVlanManagerConfig>): void;
+    /**
+     * Get current configuration
+     */
+    getConfig(): Required<IVlanManagerConfig>;
+    /**
+     * Get statistics
+     */
+    getStats(): {
+        totalMappings: number;
+        enabledMappings: number;
+        exactMatches: number;
+        ouiPatterns: number;
+        wildcardPatterns: number;
+    };
+    /**
+     * Load mappings from database
+     */
+    private loadMappings;
+    /**
+     * Save mappings to database
+     */
+    private saveMappings;
+}