Child pages
  • 802.1X secured wifi installation

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
chap
mschap
digest
files
-ldap
pap
Auth-Type PAP {
		pap
}
Auth-Type CHAP {
		chap
}
Auth-Type MS-CHAP {
		mschap
}
mschap

Uncomment the following line in the 'authorize' section:

Code Block
auth_log

 

Add the session-timeout, authlog, dup "@@@"

Modify /etc/freeradius/3.0/sites-available/inner-tunnel, comment the following lines:

Code Block
chap
mschap
files
-ldap
Auth-Type PAP {
		pap
}
Auth-Type CHAP {
		chap
}
Auth-Type MS-CHAP {
		mschap
}

Add the following line after 'filter_username' and before 'suffix' in the 'authorize' section

Code Block
auth_log

 

Add the mschap, dup "@@@"

Modify /etc/freeradius/3.0/clients.conf, comment the 'client localhost' and 'client localhost_ipv6' section and add a few of these blocks at the end, one for each wifi router:

Code Block
client test1 { # Replace test1 with a name for the router
       ipaddr = 192.168.9.2 # Replace with IP of the router
       secret = password # Replace with an actual password
}

 logrotate config

Certificates

as freerad?

Modified /etc/freeradius/3.0/certs/ca.cnf, set the following settings:

...