{
  "client_requirement": "client_is_administrator+",
  "items": [
    {
      "type": "header_page_title",
      "items": [
        {
          "type": "h1",
          "text": "RADIUS"
        },
        {
          "type": "p",
          "text": "FreeRADIUS server configuration and shared secret."
        }
      ]
    },
    {
      "type": "card",
      "label": "Shared Secret",
      "client_requirement": "client_is_administrator+",
      "items": [
        {
          "type": "p",
          "text": "Enter this secret in your access point or wireless controller as the RADIUS shared secret. It authenticates your APs to this router's RADIUS server."
        },
        {
          "type": "pre_block",
          "text": "%RADIUS_SECRET%"
        },
        {
          "type": "p",
          "text": "Use this router's IP address on the AP's VLAN as the RADIUS server address. Authentication port: 1812. Accounting port: 1813."
        },
        {
          "type": "button_row",
          "items": [
            {
              "type": "button_danger",
              "action": "/action/radius/regenerate",
              "method": "post",
              "text": "Regenerate"
            }
          ]
        }
      ]
    },
    {
      "type": "card",
      "label": "Options",
      "client_requirement": "client_is_administrator+",
      "items": [
        {
          "type": "form",
          "action": "/action/radius/options_save",
          "method": "post",
          "items": [
            {
              "type": "field",
              "label": "MAC Address Format",
              "name": "mac_format",
              "input_type": "select",
              "value": "%RADIUS_MAC_FORMAT%",
              "options": [
                {"value": "aabbccddeeff",      "label": "aabbccddeeff"},
                {"value": "aa-bb-cc-dd-ee-ff", "label": "aa-bb-cc-dd-ee-ff"},
                {"value": "aa:bb:cc:dd:ee:ff", "label": "aa:bb:cc:dd:ee:ff"},
                {"value": "AABBCCDDEEFF",      "label": "AABBCCDDEEFF"},
                {"value": "AA-BB-CC-DD-EE-FF", "label": "AA-BB-CC-DD-EE-FF"},
                {"value": "AA:BB:CC:DD:EE:FF", "label": "AA:BB:CC:DD:EE:FF"}
              ],
              "hint": "Must match your AP/controller's expected format."
            },
            {
              "type": "field",
              "label": "Apply DEFAULT Rule To",
              "name": "apply_to",
              "input_type": "select",
              "value": "%RADIUS_APPLY_TO%",
              "options": [
                {"value": "all",      "label": "All clients"},
                {"value": "wireless", "label": "Wireless clients only (NAS-Port-Type = Wireless-802.11)"}
              ],
              "hint": "Scoping to wireless only prevents the DEFAULT rule from assigning a VLAN to unknown wired switch ports."
            },
            {
              "type": "button_row",
              "items": [
                {
                  "type": "button_primary",
                  "action": "/action/radius/options_save",
                  "method": "post",
                  "text": "Save"
                }
              ]
            }
          ]
        }
      ]
    },
    {
      "type": "card",
      "label": "Logging",
      "client_requirement": "client_is_administrator+",
      "items": [
        {
          "type": "form",
          "action": "/action/radius/logging_save",
          "method": "post",
          "items": [
            {
              "type": "field",
              "label": "",
              "name": "logging",
              "input_type": "checkbox",
              "checkbox_label": "Log auth requests",
              "value": "%RADIUS_LOGGING%",
              "hint": "Enables auth and auth_accept/auth_reject in radiusd.conf. High volume on busy networks - enable for debugging only."
            },
            {
              "type": "hr"
            },
            {
              "type": "pre_block",
              "text": "%RADIUS_LOG_TAIL%",
              "scroll_to_bottom": true
            },
            {
              "type": "raw_html",
              "html": "%RADIUS_LOG_SUMMARY%"
            },
            {
              "type": "hr"
            },
            {
              "type": "field",
              "label": "Max Log Size (KB)",
              "name": "log_max_kb",
              "input_type": "number",
              "layout": "inline",
              "value": "%RADIUS_GEN_LOG_MAX_KB%",
              "min": "64",
              "hint": "Log display will be truncated to this size."
            },
            {
              "type": "button_row",
              "items": [
                {
                  "type": "button_primary",
                  "text": "Save"
                },
                {
                  "type": "button_cancel",
                  "text": "Cancel"
                }
              ]
            }
          ]
        },
        {
          "type": "button_row",
          "justify": "space-between",
          "items": [
            {
              "type": "button_ghost",
              "action": "/action/radius/logging_download",
              "text": "Download Log"
            },
            {
              "type": "button_danger",
              "action": "/action/radius/logging_clear",
              "method": "post",
              "text": "Clear Log"
            }
          ]
        }
      ]
    }
  ]
}