How to setup FreeRadius with Mysql and Daloradius web front end secure access for wifi vpn and more.

Опубликовано: 27 Сентябрь 2020
на канале: JDs Tech Tips
37,228
340

Easily setup and configure a freeradius server for your wifi,vpn or corporate networks,hundreds of applications from ISP and enterprise business users,to small business and home users with smaller IT networks and security configurations.Get up and running with a small digital ocean Droplet and secure access to wiif,vpn,networks,switches routers and so much more,just follow to the instructions to get a basic system setup and configured with web front end for free.

Tools and Links used in this Video:
Get a droplet in digital Ocean https://m.do.co/c/f2e5d955a265
Brave Browser https://brave.com/jds304
Freeradius https://freeradius.org/
Daloradius http://daloradius.com/


First the list of pre requisites that are needed for installation

sudo apt-get install apache2 mysql-server php libapache2-mod-php php-mail php-mail-mime php-mysql php-gd php-common php-pear php-db php-mbstring php-xml php-curl unzip wget -y
sudo apt-get install freeradius freeradius-mysql freeradius-utils -y
sudo apt-get install libapache2-mod-php*


Login to mysql and run the secure_mysql_installation script

How to secure and configure the database

create database radius;
CREATE USER 'radiusadm'@'%' IDENTIFIED BY 'Rd$$123!';
GRANT ALL PRIVILEGES ON . TO 'radiusadm'@'%' WITH GRANT OPTION;
FLUSH PRIVILEGES;
exit;

Populate the database with the freeradius sql scripts,this will add the tables required to the database

mysql -u root -p radius < /etc/freeradius/3.0/mods-config/sql/main/mysql/schema.sql
nano -w /etc/freeradius/3.0/mods-available/sql

Add a symlink

ln -s /etc/freeradius/3.0/mods-available/sql /etc/freeradius/3.0/mods-enabled/
chown -h freerad.freerad /etc/freeradius/3.0/mods-enabled/sql

systemctl restart freeradius

Test the setup with the radcheck utility by inserting a test user and verifing authentication
insert into radcheck (id,username,attribute,op,value) values("1", "testuser", "Cleartext-Password", ":=", "badpassword123");

radtest testuser badpassword123 localhost 10 testing123



Download the Daloradius to your server
https://sourceforge.net/projects/dalo...

Unzip it into the /var/www/html apache directory
then set permissions so apache can read the files in /daloradius/
chown -R www-data.www-data /var/www/html/daloradius/
chmod 644 /var/www/html/daloradius/library/daloradius.conf.php


Add the daloradius mysql tables to the database
mysql -u root -p radius < /var/www/html/daloradius/contrib/db/fr2-mysql-daloradius-and-freeradius.sql
mysql -u root -p radius < /var/www/html/daloradius/contrib/db/mysql-daloradius.sql



Configure the UFW firewall
sudo ufw status verbose

sudo ufw enable
sudo ufw logging on
sudo ufw allow 22/tcp
sudo ufw allow 1812:1813/udp
sudo ufw default deny incoming
ufw allow from yourwanip to any port 443/tcp #https from your wan to admin gui
ufw allow from 89.x.x.x to any port 443/tcp #replace with your management network wan IP.


Digital ocean Lets Encrypt tutorial for ssl cert https://www.digitalocean.com/communit...


Смотрите видео How to setup FreeRadius with Mysql and Daloradius web front end secure access for wifi vpn and more. онлайн без регистрации, длительностью часов минут секунд в хорошем качестве. Это видео добавил пользователь JDs Tech Tips 27 Сентябрь 2020, не забудьте поделиться им ссылкой с друзьями и знакомыми, на нашем сайте его посмотрели 37,228 раз и оно понравилось 340 людям.