NOTE:<\/strong> If you’d like to set up FreeRADIUS on an Ubuntu 18.04<\/strong> machine, visit our other tutorial Install and Configure FreeRADIUS on Ubuntu 18.04 with MySQL<\/a><\/small><\/p><\/blockquote>\n Installing FreeRADIUS on CentOS 8:<\/strong> For an updated and more detailed guide (with Video) for installing FreeRADIUS on CentOS 8, you can check out Install FreeRADIUS & daloRADIUS on CentOS 8 + MySQL\/MariaDB on ByteXD.com<\/a>.<\/small><\/p><\/blockquote>\n\n We present 2 methods of setting up FreeRADIUS:<\/p>\n 1. The hard way: <\/strong> Manually setting it up by connecting to your machine via SSH, as well as configuring it and troubleshooting. Depending on your end goal, this can take from 30 if you know what you’re doing, to several hours if you’re just getting started.<\/p>\n 2. The easy way: <\/strong> Deploying a server with FreeRADIUS + daloRADIUS + phpMyAdmin installed out of the box in just a few minutes<\/strong>. You can do this by ordering our FreeRADIUS VPS that comes with the software installed and also offers you the possibility to also order priority support, so you’ll have our assistance with any RADIUS related issue you have going forward. To proceed, check out our FreeRADIUS Server Plans<\/a>.<\/p>\n Should you be pressed for time and need to deploy RADIUS servers fast and troubleshoot problems quickly, your best option may be an out of the box solution. As mentioned, you can also upgrade your service to receive Priority Support<\/strong>, should you find yourself tackling complex problems. To order, proceed to our FreeRADIUS VPS Plans<\/a>.<\/p>\n Pre-Installed FreeRADIUS Servers<\/p>\r\n Automatic FreeRADIUS 3 + daloRADIUS Set Up<\/span><\/p>\r\n\r\n<\/div>\r\n Instantly deploy machines with FreeRADIUS + MySQL + daloRADIUS GUI Panel already set up, receive the credentials and take over from there! You also get our custom WHMCS Module to help you manage it from our dashboard.<\/p>\r\n\r\n<\/div>\r\n Pick one of our FreeRADIUS KVM plans<\/p>\r\n\r\n<\/div>\r\n P.S. We're available for hire, if you need help. Click here to contact us<\/a>.<\/p>\r\n<\/div>\n Prefer to do it yourself? Then this is the way to go. Moving forward, we’ll install FreeRADIUS along with daloRADIUS on a machine running a fresh installation of CentOS 7.<\/p>\n Run the following command to update the system’s package index:<\/p>\n We want to install the following packages:<\/p>\n We normally can install the above mentioned packages from the CentOS YUM repository.<\/p>\n With the following line we’ll perform a quick search for all the available freeRADIUS<\/strong> packages, to make sure they’re available:<\/p>\n The output should look something like this:<\/p>\n Looking through the output we can see the packages we want to install are available so we can go through with the installation.<\/p>\n With the following line we’ll install After the installation’s finished, start and enable freeRADIUS<\/strong> so it’s running and so it also starts up on boot:<\/p>\n Output for Check the status of Output:<\/p>\n We’ll configure firewalld<\/strong> to allow RADIUS server uses UDP ports 1812 and 1813. You can check this by issuing the following command:<\/p>\n Output:<\/p>\n Output of status check:<\/p>\n The services that we just allowed ( We’ll test the RADIUS server in debug mode, which means we’ll have to run the service. The problem is that the server’s already running from earlier, and running in debug mode will fail to bind ports, as such we’ll have to kill the radius service first:<\/p>\n Now run the RADIUS server in debug mode to check if everything’s working:<\/p>\n You should see a long output ending in:<\/p>\n The basic installation of FreeRADIUS seems to have been successful.<\/p>\n Now we’ll proceed with configuring our RADIUS server to use MariaDB or MySQL<\/strong> ( depending on which you prefer ).<\/p>\n NOTE:<\/strong> MariaDB 5.5 is the default database engine in CentOS at the time of writing. Installing MySQL should be somewhat similar. Should you want us to add instructions for MySQL, then just hit us up and we’ll add in the instructions for MySQL.<\/small><\/p><\/blockquote>\n MariaDB 10 is not the default version on CentOS, as such we’ll add the official MariaDB repositories to our system.<\/p>\n Create a new file, we’ll call it Add the following content to it, and save and exit the file when you’re done:<\/p>\n Update the package index:<\/p>\n And install MariaDB:<\/p>\n After the installation is finished, start MariaDB and Check to make sure it’s running and enabled:<\/p>\n MariaDB\/MySQL comes with a script that helps you conveniently secure it and remove some insecure defaults. Some important things it allows you to do:<\/p>\n Run it with the following command and you’ll be guided through the process.<\/p>\n We recommend you proceed as follows:<\/p>\n You\u2019ll also be prompted to answer some questions to remove\/keep some defaults:<\/p>\n CentOS 7 ships with PHP 5.4 at the time of writing, which has been officially EOL for some time.<\/p>\n By using PHP 7 applications will load faster and use up less resources.<\/p>\n PHP 7.x is available from various repositories. For our purposes, we’ll use the Remi Repository<\/a>, which provides newer versions of applications.<\/p>\n The Remi Repository depends on the EPEL repository. With the following line we’ll add both EPEL and Remi:<\/p>\n We’ll install PHP 7.3, which is the latest stable release at the time of writing.<\/p>\n Enable the PHP 7.3 Remi repository:<\/p>\n And run the following command to install PHP 7.3 along with some of the most common PHP modules:<\/p>\n You may be asked during the installation if you’re ok with importing a GPG Key. Answer With the following command we can check the PHP version, to make sure the installation was successful:<\/p>\n To configure FreeRADIUS to use MariaDB \/ MySQL, we’ll have to create a database with tables to be used by the FreeRADIUS server for finding RADIUS users and to store accounting data.<\/p>\n The FreeRADIUS MySQL package ships with the necessary query to create these tables, making our job a lot easier.<\/p>\n To begin, we’ll log into MariaDB or MySQL and create and configure a database that we’ll call Enter your password at the prompt.<\/p>\n Once you’re logged in, run the following commands to create and configure the database:<\/p>\n Next import the RADIUS database scheme to populate the And create a soft link for SQL under Now we’ll configure the freeRADIUS server to use the database server. Do this by opening the configuration file The The steps to follow here are:<\/p>\n And here is how they look after:<\/p>\n Finally, change the group rights of Now let’s run FreeRADIUS in debug mode again, since we’ve made some changes.<\/p>\n If the RADIUS server is running, first kill the deamon:<\/p>\n And run the server in debug mode:<\/p>\n Output:<\/p>\n There are a few freeRADIUS web panels available for easier user creation and management. We’re currently using daloRADIUS. You can follow our tutorial to installing daloRADIUS WebPanel on a RADIUS server on CentOS 7<\/a>, and then return to this page.<\/p>\n NOTE:<\/strong> Should you be looking for a ready-made solution complete with FreeRADIUS + daloRADIUS installed, we offer FreeRADIUS Servers<\/a> that you can deploy in a few minutes. Additionally you can opt, any time after you’ve ordered, for priority support<\/strong> which ensures you get help when you encounter issues.<\/small><\/p><\/blockquote>\n For other computers to connect to the RADIUS server, they need to be added to the NAS client table<\/strong> in the RADIUS database.<\/p>\n First we need to add the NAS<\/strong>. Do this in daloRADIUS by navigating to Management > Nas > New Nas<\/strong>.<\/p>\n After adding the NAS, you can add new Users<\/strong> in daloRADIUS by going to Management > Users > New Users<\/strong>.<\/p>\n There are more attributes that you can set to users and user groups, however that is beyond the scope of this tutorial.<\/p>\n Now that we’ve added a new NAS and new User, we should test them. Every time a new NAS is added, you’ll need to reload FreeRADIUS so it fetches the refreshed table. To test that everything is OK, stop the freeradius<\/strong> server and start it in debug mode and move on to the next step<\/strong>.<\/p>\n First we’ll kill the daemon:<\/p>\n And start it in debug mode:<\/p>\n A great tool we can use to test our radius servers is NTRadPing. You can download it here: ntradping<\/a>.<\/p>\n Unzip and run the executable, and in fill out the fields with the credentials you created earlier when adding the new NAS and new User. Here’s how we fill it, according to the credentials we created in this tutorial. Also keep in mind that RADIUS users port RADIUS Server\/port:<\/strong> And check the How to set up a RADIUS server?<\/h2>\n
Method 1 \u2014\u00a0The Easy Way – 5 minutes<\/h2>\n
\r\nMethod 2 \u2014\u00a0The Hard Way<\/h2>\n
Step 1 \u2013 Install FreeRADIUS & Additional Modules on CentOS 7<\/h2>\n
$ sudo yum -y update<\/code><\/pre>\n\n
$ sudo yum search all freeradius<\/code><\/pre>\nLoaded plugins: fastestmirror\nLoading mirror speeds from cached hostfile\n * base: ftpmirror.your.org\n * epel: mirror.layeronline.com\n * extras: ftpmirror.your.org\n * updates: ftpmirror.your.org\n============================================================================================================ Matched: freeradius =============================================================================================================\nfreeradius-devel.i686 : FreeRADIUS development files\nfreeradius-devel.x86_64 : FreeRADIUS development files\nfreeradius-doc.x86_64 : FreeRADIUS documentation\nfreeradius-krb5.x86_64 : Kerberos 5 support for freeradius\nfreeradius-ldap.x86_64 : LDAP support for freeradius\nfreeradius-mysql.x86_64 : MySQL support for freeradius\nfreeradius-perl.x86_64 : Perl support for freeradius\nfreeradius-postgresql.x86_64 : Postgresql support for freeradius\nfreeradius-python.x86_64 : Python support for freeradius\nfreeradius-sqlite.x86_64 : SQLite support for freeradius\nfreeradius-unixODBC.x86_64 : Unix ODBC support for freeradius\nfreeradius-utils.x86_64 : FreeRADIUS utilities\nfreeradius.x86_64 : High-performance and highly configurable free RADIUS server\nradcli-compat-devel.x86_64 : Development files for compatibility with radiusclient-ng and freeradius-client\npam_radius.x86_64 : PAM Module for RADIUS Authentication\nradcli.x86_64 : RADIUS protocol client library<\/code><\/pre>\nfreeradius.x86_64 : High-performance and highly configurable free RADIUS server\nfreeradius-utils.x86_64 : FreeRADIUS utilities\nfreeradius-mysql.x86_64 : MySQL support for freeradius\nfreeradius-perl.x86_64 : Perl support for freeradius<\/code><\/pre>\nfreeradius<\/code>, freeradius-utils<\/code>, freeradius-mysql<\/code> and freeradius-perl<\/code>:<\/p>\n$ sudo yum -y install freeradius freeradius-utils freeradius-mysql freeradius-perl <\/code><\/pre>\n$ systemctl start radiusd.service\n$ systemctl enable radiusd.service<\/code><\/pre>\nenable radiusd.service<\/code>:<\/p>\nCreated symlink from \/etc\/systemd\/system\/multi-user.target.wants\/radiusd.service to \/usr\/lib\/systemd\/system\/radiusd.service.<\/code><\/pre>\nradiusd.service<\/code>:<\/p>\n$ systemctl status radiusd.service<\/code><\/pre>\n\u25cf radiusd.service - FreeRADIUS high performance RADIUS server.\n Loaded: loaded (\/usr\/lib\/systemd\/system\/radiusd.service; enabled; vendor preset: disabled)\n Active: active (running) since Sat 2019-05-04 15:28:42 UTC; 1min 8s ago\n Main PID: 1687 (radiusd)\n CGroup: \/system.slice\/radiusd.service\n \u2514\u25001687 \/usr\/sbin\/radiusd -d \/etc\/raddb\n\nMay 04 15:28:42 dracula_backup systemd[1]: Starting FreeRADIUS high performance RADIUS.....\nMay 04 15:28:42 dracula_backup systemd[1]: Started FreeRADIUS high performance RADIUS .....\nHint: Some lines were ellipsized, use -l to show in full.<\/code><\/pre>\nConfigure CentOS 7 Firewall for freeRADIUS<\/h3>\n
radius<\/code> and httpd<\/code> packets.<\/p>\n$ cat \/usr\/lib\/firewalld\/services\/radius.xml<\/code><\/pre>\n\n\n RADIUS\n The Remote Authentication Dial In User Service (RADIUS) is a protocol for user authentication over networks. It is mostly used for modem, DSL or wireless user authentication. If you plan to provide a RADIUS service (e.g. with freeradius), enable this option.\n \n \n \n \n<\/code><\/pre>\n\n
$ systemctl enable firewalld\n$ systemctl start firewalld\n$ systemctl status firewalld<\/code><\/pre>\n\u25cf firewalld.service - firewalld - dynamic firewall daemon\n Loaded: loaded (\/usr\/lib\/systemd\/system\/firewalld.service; enabled; vendor preset: enabled)\n Active: active (running) since Sat 2019-05-04 13:39:12 UTC; 8h ago\n Docs: man:firewalld(1)\n Main PID: 1775 (firewalld)\n CGroup: \/system.slice\/firewalld.service\n \u2514\u25001775 \/usr\/bin\/python -Es \/usr\/sbin\/firewalld --nofork --nopid\n\nMay 04 13:39:10 guest systemd[1]: Starting firewalld - dynamic firewall daemon...\nMay 04 13:39:12 guest systemd[1]: Started firewalld - dynamic firewall daemon.<\/code><\/pre>\n<\/li>\n$ firewall-cmd --state\nrunning<\/code><\/pre>\n<\/li>\nhttp<\/code>, https<\/code> and radius<\/code> services\n$ firewall-cmd --add-service={http,https,radius} --permanent<\/code><\/pre>\n<\/li>\n$ firewall-cmd --reload<\/code><\/pre>\n<\/li>\n$ firewall-cmd --get-default-zone\npublic\n\n$ firewall-cmd --list-services --zone=public\ndhcpv6-client http https radius ssh<\/code><\/pre>\nhttp<\/code>, https<\/code> & radius<\/code>) are all listed in the output, which means we can proceed.<\/li>\n<\/ol>\nTest RADIUS Server<\/h3>\n
$ pkill radius<\/code><\/pre>\n$ radiusd -X<\/code><\/pre>\nListening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel\nListening on auth address * port 1812 bound to server default\nListening on acct address * port 1813 bound to server default\nListening on auth address :: port 1812 bound to server default\nListening on acct address :: port 1813 bound to server default\nListening on proxy address * port 57424\nListening on proxy address :: port 44958\nReady to process requests<\/code><\/pre>\nStep 2 \u2013 Install & Configure MariaDB 10 on CentOS 7<\/h2>\n
\/etc\/yum.repos.d\/MariaDB.repo<\/code> using your favorite text editor:<\/p>\n$ nano \/etc\/yum.repos.d\/MariaDB.repo<\/code><\/pre>\n[mariadb]\nname = MariaDB\nbaseurl = http:\/\/yum.mariadb.org\/10.1\/centos7-amd64\ngpgkey=https:\/\/yum.mariadb.org\/RPM-GPG-KEY-MariaDB\ngpgcheck=1<\/code><\/pre>\n$ yum -y update<\/code><\/pre>\n$ yum install -y mariadb-server mariadb<\/code><\/pre>\nenable<\/code> it so it runs on boot:<\/p>\n$ systemctl start mariadb\n$ systemctl enable mariadb<\/code><\/pre>\n$ systemctl status mariadb\n$ systemctl is-enabled mariadb.service\nenabled<\/code><\/pre>\nSecuring MariaDB \/ MySQL<\/h3>\n
\n
$ mysql_secure_installation<\/code><\/pre>\nEnter current password for root (enter for none): ENTER<\/code>
\nSet root password? [Y\/n] y<\/code>
\nNew password: Enter password<\/code>
\nRe-enter new password: Repeat password<\/code><\/p>\nRemove anonymous users? [Y\/n]: Y<\/code>
\nDisallow root login remotely? [Y\/n]: Y<\/code>
\nRemove test database and access to it? [Y\/n]: Y<\/code>
\nReload privilege tables now? [Y\/n]: Y<\/code><\/p>\nStep 3 \u2013 Install PHP 7 on CentOS 7<\/h2>\n
$ sudo yum install epel-release yum-utils\n$ sudo yum install http:\/\/rpms.remirepo.net\/enterprise\/remi-release-7.rpm<\/code><\/pre>\n$ sudo yum-config-manager --enable remi-php73<\/code><\/pre>\n$ sudo yum install php php-common php-opcache php-mcrypt php-cli php-gd php-curl php-mysqlnd<\/code><\/pre>\ny<\/code> and hit enter.<\/p>\n$ php -v<\/code><\/pre>\nStep 4 \u2013 Configure FreeRADIUS to use MariaDB\/MySQL<\/h2>\n
radius<\/code>:<\/p>\n$ mysql -u root -p<\/code><\/pre>\nMariaDB [(none)]> CREATE DATABASE radius;\nMariaDB [(none)]> GRANT ALL ON radius.* TO radius@localhost IDENTIFIED BY \"radiuspassword\";\nMariaDB [(none)]> FLUSH PRIVILEGES;\nMariaDB [(none)]> quit;<\/code><\/pre>\nradius<\/code> database:<\/p>\n$ mysql -uroot -pYOUR_PASSWORD radius < \/etc\/raddb\/mods-config\/sql\/main\/mysql\/schema.sql<\/code><\/pre>\n\/etc\/raddb\/mods-enabled<\/code>:<\/p>\n$ ln -s \/etc\/raddb\/mods-available\/sql \/etc\/raddb\/mods-enabled\/<\/code><\/pre>\n\/raddb\/mods-available\/sql<\/code> using your favorite text editor:<\/p>\n$ nano \/etc\/raddb\/mods-available\/sql<\/code><\/pre>\nsql<\/code> section should look something like the following, although yours will be a longer document due to explanations and other lines that are commented out.<\/p>\nsql {\n\ndriver = \"rlm_sql_mysql\"\ndialect = \"mysql\"\n\n# Connection info:\n\nserver = \"localhost\"\nport = 3306\nlogin = \"radius\"\npassword = \"radiuspassword\"\n\n# Database table configuration for everything except Oracle\n\nradius_db = \"radius\"\n}\n\n# Set to \u2018yes\u2019 to read radius clients from the database (\u2018nas\u2019 table)\n# Clients will ONLY be read on server startup.\nread_clients = yes\n\n# Table to keep radius client info\nclient_table = \u201cnas\u201d<\/code><\/pre>\n\n
driver = \"rlm_sql_null\"<\/code> to driver = \"rlm_sql_mysql\"<\/code><\/li>\ndialect = \"sqlite\"<\/code> to dialect = \"mysql\"<\/code><\/li>\nserver<\/code>, port<\/code>, login<\/code> and password<\/code> by removing #<\/code> from the beginning of the line, as well as changing password = \"radpass\"<\/code> to password = \"radiuspassword\"<\/code>.To exemplify, here is how the lines look initially:\n#\tserver = \"localhost\"\n#\tport = 3306\n# login = \"radius\"\n# password = \"radpass\"<\/code><\/pre>\n \tserver = \"localhost\"\n \tport = 3306\n login = \"radius\"\n password = \"radiuspassword\"<\/code><\/pre>\n<\/li>\nread_clients = yes<\/code> line, by removing the #<\/code> at the beginning of the line.<\/li>\n\/etc\/raddb\/mods-enabled\/sql<\/code> to radiusd<\/code>:<\/p>\n$ chgrp -h radiusd \/etc\/raddb\/mods-enabled\/sql<\/code><\/pre>\npkill radiusd<\/code><\/pre>\nradiusd -X<\/code><\/pre>\nListening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel\nListening on auth address * port 1812 bound to server default\nListening on acct address * port 1813 bound to server default\nListening on auth address :: port 1812 bound to server default\nListening on acct address :: port 1813 bound to server default\nListening on proxy address * port 59387\nListening on proxy address :: port 51874\nReady to process requests<\/code><\/pre>\nStep 5 \u2013 GUI WebPanel<\/h2>\n
![\"daloradius_preview\"](\"https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2018\/12\/daloradius.jpg\")
<\/a><\/p>\nStep 6 \u2013 Create a NAS Client & User<\/h2>\n
![\"daloradius_create_nas_table\"](\"https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2018\/12\/nas_dalo_radius.png\" "\\"Add")
<\/a><\/p>\n<\/a><\/p>\n$ pkill radiusd<\/code><\/pre>\n$ radiusd -X<\/code><\/pre>\nStep 7 \u2013 Testing with NTRadPing<\/h2>\n
1812<\/code>, so that’s the port you want to fill in.<\/p>\nyour_server_ip<\/code> \/ 1812<\/code>
\nRADIUS Secret Key:<\/strong> strongsecret!<\/code>
\nPassword:<\/strong> Strongpassword<\/code><\/p>\nCHAP<\/code> checkbox.<\/p>\n