How to setup FreeRadius with Mysql and Daloradius web front end secure access for wifi vpn and more.

Published: 27 September 2020
on channel: JDs Tech Tips
37,228
340

Easily setup and configure a freeradius server for your wifi,vpn or corporate networks,hundreds of applications from ISP and enterprise business users,to small business and home users with smaller IT networks and security configurations.Get up and running with a small digital ocean Droplet and secure access to wiif,vpn,networks,switches routers and so much more,just follow to the instructions to get a basic system setup and configured with web front end for free.

Tools and Links used in this Video:
Get a droplet in digital Ocean https://m.do.co/c/f2e5d955a265
Brave Browser https://brave.com/jds304
Freeradius https://freeradius.org/
Daloradius http://daloradius.com/


First the list of pre requisites that are needed for installation

sudo apt-get install apache2 mysql-server php libapache2-mod-php php-mail php-mail-mime php-mysql php-gd php-common php-pear php-db php-mbstring php-xml php-curl unzip wget -y
sudo apt-get install freeradius freeradius-mysql freeradius-utils -y
sudo apt-get install libapache2-mod-php*


Login to mysql and run the secure_mysql_installation script

How to secure and configure the database

create database radius;
CREATE USER 'radiusadm'@'%' IDENTIFIED BY 'Rd$$123!';
GRANT ALL PRIVILEGES ON . TO 'radiusadm'@'%' WITH GRANT OPTION;
FLUSH PRIVILEGES;
exit;

Populate the database with the freeradius sql scripts,this will add the tables required to the database

mysql -u root -p radius < /etc/freeradius/3.0/mods-config/sql/main/mysql/schema.sql
nano -w /etc/freeradius/3.0/mods-available/sql

Add a symlink

ln -s /etc/freeradius/3.0/mods-available/sql /etc/freeradius/3.0/mods-enabled/
chown -h freerad.freerad /etc/freeradius/3.0/mods-enabled/sql

systemctl restart freeradius

Test the setup with the radcheck utility by inserting a test user and verifing authentication
insert into radcheck (id,username,attribute,op,value) values("1", "testuser", "Cleartext-Password", ":=", "badpassword123");

radtest testuser badpassword123 localhost 10 testing123



Download the Daloradius to your server
https://sourceforge.net/projects/dalo...

Unzip it into the /var/www/html apache directory
then set permissions so apache can read the files in /daloradius/
chown -R www-data.www-data /var/www/html/daloradius/
chmod 644 /var/www/html/daloradius/library/daloradius.conf.php


Add the daloradius mysql tables to the database
mysql -u root -p radius < /var/www/html/daloradius/contrib/db/fr2-mysql-daloradius-and-freeradius.sql
mysql -u root -p radius < /var/www/html/daloradius/contrib/db/mysql-daloradius.sql



Configure the UFW firewall
sudo ufw status verbose

sudo ufw enable
sudo ufw logging on
sudo ufw allow 22/tcp
sudo ufw allow 1812:1813/udp
sudo ufw default deny incoming
ufw allow from yourwanip to any port 443/tcp #https from your wan to admin gui
ufw allow from 89.x.x.x to any port 443/tcp #replace with your management network wan IP.


Digital ocean Lets Encrypt tutorial for ssl cert https://www.digitalocean.com/communit...


Watch video How to setup FreeRadius with Mysql and Daloradius web front end secure access for wifi vpn and more. online without registration, duration hours minute second in high quality. This video was added by user JDs Tech Tips 27 September 2020, don't forget to share it with your friends and acquaintances, it has been viewed on our site 37,228 once and liked it 340 people.