From b8770c3296ef886b374cd49444c1b1695eaca332 Mon Sep 17 00:00:00 2001
From: oxidized <oxidized@einsle.de>
Date: Wed, 17 Jul 2019 13:31:45 +0200
Subject: [PATCH] update opnsense/fw02.ke.einsle.de

---
 opnsense/fw02.ke.einsle.de | 139 ++++++++++++++++++++++++++++++-------
 1 file changed, 114 insertions(+), 25 deletions(-)

diff --git a/opnsense/fw02.ke.einsle.de b/opnsense/fw02.ke.einsle.de
index 10b450b..00f553f 100644
--- a/opnsense/fw02.ke.einsle.de
+++ b/opnsense/fw02.ke.einsle.de
@@ -348,7 +348,7 @@
     <dnsserver>2620:0:ccc::2</dnsserver>
     <dnsserver>2620:0:ccd::2</dnsserver>
     <firmware>
-      <plugins>os-zerotier,os-net-snmp</plugins>
+      <plugins>os-zerotier,os-net-snmp,os-freeradius,os-etpro-telemetry</plugins>
     </firmware>
     <serialspeed>115200</serialspeed>
     <primaryconsole>video</primaryconsole>
@@ -1402,13 +1402,13 @@
     <prefer>0.opnsense.pool.ntp.org</prefer>
   </ntpd>
   <widgets>
-    <sequence>system_information-container:00000000-col3:show,traffic_graphs-container:00000001-col3:show,cpu_usage-container:00000002-col3:show,log-container:00000003-col3:show,services_status-container:00000004-col4:show,gateways-container:00000005-col4:show,interface_list-container:00000006-col4:show,openvpn-container:00000007-col4:show,carp_status-container:00000008-col4:show</sequence>
+    <sequence>system_information-container:00000000-col3:show,traffic_graphs-container:00000001-col3:show,proofpoint_et-container:00000002-col3:show,cpu_usage-container:00000003-col3:show,log-container:00000004-col3:show,services_status-container:00000005-col4:show,gateways-container:00000006-col4:show,interface_list-container:00000007-col4:show,openvpn-container:00000008-col4:show,carp_status-container:00000009-col4:show</sequence>
     <column_count>2</column_count>
   </widgets>
   <revision>
-    <username>(root)@172.24.11.2</username>
-    <time>1562308237.3781</time>
-    <description>Merged filter,OPNsense,staticroutes,gateways,virtualip,cert,ca,crl,system,schedules,unbound,openvpn,nat config sections from XMLRPC client.</description>
+    <username>(system)</username>
+    <time>1563361622.2007</time>
+    <description>/usr/local/opnsense/mvc/script/run_migrations.php made changes</description>
   </revision>
   <OPNsense>
     <Firewall>
@@ -1632,26 +1632,6 @@ PORT_mail</content>
     <cron version="1.0.1">
       <jobs/>
     </cron>
-    <IDS version="1.0.2">
-      <rules/>
-      <userDefinedRules/>
-      <files/>
-      <fileTags/>
-      <general>
-        <enabled>0</enabled>
-        <ips>0</ips>
-        <promisc>0</promisc>
-        <interfaces>wan</interfaces>
-        <homenet>192.168.0.0/16,10.0.0.0/8,172.16.0.0/12</homenet>
-        <defaultPacketSize/>
-        <UpdateCron/>
-        <AlertLogrotate>W0D23</AlertLogrotate>
-        <AlertSaveLogs>4</AlertSaveLogs>
-        <MPMAlgo>ac</MPMAlgo>
-        <syslog>0</syslog>
-        <LogPayload>0</LogPayload>
-      </general>
-    </IDS>
     <proxy version="1.0.3">
       <general>
         <enabled>0</enabled>
@@ -1845,6 +1825,115 @@ PORT_mail</content>
         </server>
       </servers>
     </OpenVPNExport>
+    <freeradius>
+      <ldap version="1.0.0">
+        <protocol>LDAPS</protocol>
+        <server/>
+        <identity/>
+        <password/>
+        <base_dn>dc=example,dc=domain,dc=com</base_dn>
+        <user_filter>(uid=%{%{Stripped-User-Name}:-%{User-Name}})</user_filter>
+        <group_filter>(objectClass=posixGroup)</group_filter>
+      </ldap>
+      <dhcp version="1.0.0">
+        <dhcps/>
+      </dhcp>
+      <lease version="1.0.0">
+        <leases/>
+      </lease>
+      <eap version="1.0.0">
+        <default_eap_type>mschapv2</default_eap_type>
+        <enable_client_cert>1</enable_client_cert>
+        <ca>5d1dfed836986</ca>
+        <certificate>5d1e21b2c1e63</certificate>
+        <crl>5d1dff4d164f2</crl>
+      </eap>
+      <general version="1.0.0">
+        <enabled>1</enabled>
+        <vlanassign>1</vlanassign>
+        <ldap_enabled>0</ldap_enabled>
+        <wispr>0</wispr>
+        <chillispot>0</chillispot>
+        <mikrotik>1</mikrotik>
+        <sqlite>0</sqlite>
+        <sessionlimit>0</sessionlimit>
+        <log_destination>files</log_destination>
+        <log_authentication_request>1</log_authentication_request>
+        <log_authbadpass>1</log_authbadpass>
+        <log_authgoodpass>0</log_authgoodpass>
+        <dhcpenabled>0</dhcpenabled>
+        <dhcplistenip/>
+        <mysql>0</mysql>
+        <mysqlserver>127.0.0.1</mysqlserver>
+        <mysqlport>3306</mysqlport>
+        <mysqluser>radius</mysqluser>
+        <mysqlpassword>radpass</mysqlpassword>
+        <mysqldb>radius</mysqldb>
+      </general>
+      <client version="1.0.0">
+        <clients>
+          <client uuid="2ef56b7e-dd2d-4b9e-8bb0-a5fa0c48b4cc">
+            <enabled>1</enabled>
+            <name>mt-kg2</name>
+            <secret>Ggrrvghjnbhjommn</secret>
+            <ip>172.24.10.90</ip>
+          </client>
+        </clients>
+      </client>
+      <user version="1.0.2">
+        <users>
+          <user uuid="d9577b44-007f-4119-af77-6fb0e599c019">
+            <enabled>1</enabled>
+            <username>reinsle</username>
+            <password>In5tall!</password>
+            <description>reinsle</description>
+            <ip/>
+            <subnet/>
+            <route/>
+            <ip6/>
+            <vlan>42</vlan>
+            <logintime/>
+            <simuse/>
+            <wispr_bw_min_up/>
+            <wispr_bw_max_up/>
+            <wispr_bw_min_down/>
+            <wispr_bw_max_down/>
+            <chillispot_bw_max_up/>
+            <chillispot_bw_max_down/>
+            <mikrotik_vlan_id_number>42</mikrotik_vlan_id_number>
+            <mikrotik_vlan_id_type>0</mikrotik_vlan_id_type>
+            <sessionlimit_max_session_limit/>
+          </user>
+        </users>
+      </user>
+    </freeradius>
+    <IDS version="1.0.3">
+      <rules/>
+      <userDefinedRules/>
+      <files/>
+      <fileTags/>
+      <general>
+        <enabled>0</enabled>
+        <ips>0</ips>
+        <promisc>0</promisc>
+        <interfaces>wan</interfaces>
+        <homenet>192.168.0.0/16,10.0.0.0/8,172.16.0.0/12</homenet>
+        <defaultPacketSize/>
+        <UpdateCron/>
+        <AlertLogrotate>W0D23</AlertLogrotate>
+        <AlertSaveLogs>4</AlertSaveLogs>
+        <MPMAlgo>ac</MPMAlgo>
+        <syslog>0</syslog>
+        <syslog_eve>0</syslog_eve>
+        <LogPayload>0</LogPayload>
+      </general>
+    </IDS>
+    <Syslog version="1.0.0">
+      <general>
+        <enabled>1</enabled>
+      </general>
+      <destinations/>
+    </Syslog>
   </OPNsense>
   <gateways>
     <gateway_item>