How to set up FreeRADIUS?<\/h2>\n
We present 2 methods to set up your RADIUS server:<\/p>\n
1. Manual FreeRADIUS Install<\/strong> – By following this tutorial you’ll be setting up FreeRADIUS on a Debian 9 machine. Along with other configurations you may need to make, this may take 30 minutes if you’re familiar with FreeRADIUS to several hours if you’re just starting.<\/p>\n 2. Instant FreeRADIUS Server Deployment<\/strong> – You can deploy your server instantly and it will have FreeRADIUS + MySQL + daloRADIUS set up in less than 5 minutes, by using our FreeRADIUS KVM Servers<\/a>. Should you also need it, you can also opt for our priority support addon which will ensure that you receive our assistance with any RADIUS related issue from then on.<\/p>\n If you need to set up RADIUS servers fast and don’t have time to learn the intricacies of the software, then you can rely on our FreeRADIUS Server Plans<\/a>. All you have to do is choose one of the available packages, and one of our available addons if needed, and the server will be set up in less than 5 minutes. After which, you’ll see all your related credentials the first time you SSH onto the server.<\/p>\n Pre-Installed FreeRADIUS Servers<\/p>\r\n Automatic FreeRADIUS 3 + daloRADIUS Set Up<\/span><\/p>\r\n\r\n<\/div>\r\n Instantly deploy machines with FreeRADIUS + MySQL + daloRADIUS GUI Panel already set up, receive the credentials and take over from there! You also get our custom WHMCS Module to help you manage it from our dashboard.<\/p>\r\n\r\n<\/div>\r\n Pick one of our FreeRADIUS KVM plans<\/p>\r\n\r\n<\/div>\r\n P.S. We're available for hire, if you need help. Click here to contact us<\/a>.<\/p>\r\n<\/div>\n Should you choose to install manually, then we’ve got you covered. Should you encounter any issues with following this tutorial, then hit us up and we’ll try to help solve the problem as soon as we can.<\/p>\n Without further ado, let’s get to setting up our RADIUS server.<\/p>\n NOTE: <\/strong> If you already have LAMP Stack installed on your Dabian 9 machine, or don’t want to install the daloRADIUS FreeRADIUS GUI, then feel free to skip to the FreeRADIUS installation<\/small><\/p><\/blockquote>\n Before anything else, make sure you update & upgrade your system.:<\/p>\n Apache should be running right away. To check it’s status run the following:<\/p>\n You can also check that Apache is running by visiting Install MySQL by running the following command:<\/p>\n MySQL comes with a script that helps you change some insecure defaults, such as:<\/p>\n Run the script with the command:<\/p>\n We recommend you answer the prompts as follows.<\/p>\n First press enter when prompted for the root password<\/strong>:<\/p>\n Confirm that you want to set the root password and then set a complicated password for MySQL.<\/p>\n Confirm removing anonymous users.<\/p>\n Disallow root login remotely.<\/p>\n Remove the test database.<\/p>\n Reload privilege tables.<\/p>\n At this point, MySQL should be successfully set up on your Debian 9 machine.<\/p>\n Run the following command to install PHP and common extensions:<\/p>\n Now configure Apache so it processes PHP content. Do this by editing the file To configure Apache to process PHP, add index.php<\/strong> as the first value of Save and close the file when you’re done.<\/p>\n Finally restart Apache:<\/p>\n Install FreeRADIUS and it’s dependencies:<\/p>\n Enable FreeRADIUS so it runs after you restart the system:<\/p>\n For now stop FreeRADIUS so you can run it in debug mode and check if everything’s running correctly:<\/p>\n Next, run FreeRADIUS in debug mode:<\/p>\n If everything’s working OK, the output should be something like this:<\/p>\n Log into the MySQL console as Create a database and user for RADIUS:<\/p>\n Next, import the FreeRADIUS database schema that shipped with FreeRADIUS – it’s located at Enable the FreeRADIUS SQL module by creating a symbolic link to the Open Change the following values, as well as uncommenting them by removing the Look for the line locating Save and exit the file when you’re done.<\/p>\n Change the ownership and group for the SQL module to Restart FreeRADIUS:<\/p>\n daloRADIUS<\/strong> is an open-source, advanced RADIUS web control panel. It provides an easy interface for managing users, graphical reporting, accounting, a billing engine, and it integrates with Google Maps. Common uses for daloRADIUS are managing ISP deployments and hotspots.<\/p>\n First, install some required PHP extensions:<\/p>\n Install the PHP Pear DB library:<\/p>\n Download the latest version of daloRADIUS from the daloRADIUS Project page on SourceForge<\/a>.<\/p>\n The current latest version of daloRADIUS available there is daloRADIUS 0.9-9. To download it run the following command:<\/p>\n Once downloaded, extract the archive using the following command:<\/p>\n And move the daloRADIUS folder to the root directory of your server:<\/p>\n Add the daloRADIUS SQL schema:<\/p>\n Change the owner of the daloRADIUS configuration files:<\/p>\n Change the permissions of the main daloRADIUS configuration file to Open the daloRADIUS configuration file and change the database connection parameters as follows:<\/p>\n Do make sure you’ve changed Save and close the file when you’re finished, and restart freeRADIUS:<\/p>\n At this point daloRADIUS should be installed on your Debian 9 machine.<\/p>\n To test and use it, visit The default login credentials are:<\/p>\n FreeRADIUS and daloRADIUS should now be installed and configured. To make sure that the server works, we’ll create a user from the web panel and then send an Authentication request to the server.<\/p>\n For another computer to connect to our RADIUS server, it needs to be added to the NAS Client Table<\/strong> in the RADIUS database.<\/p>\n We’re just starting, so we’ll need to add a new NAS. Do this by first navigating to Management > NAS > New NAS<\/strong>.<\/p>\n Now add a new User<\/strong> by navigating to Management > Users > New Users<\/strong> and filling the form similarly to the following:<\/p>\n There are more attributes you can add to users and groups, but that’s beyond the scope of this tutorial.<\/p>\n Now we should test the NAS and User. Remember that every time a NAS is added, you need to restart FreeRADIUS so it fetches the updated table.<\/p>\n To test our setup, we’ll have to run in debug mode<\/strong> to check out the output. However, FreeRADIUS is probably still running. So to run it in debug mode we’ll have to stop the running service and start it in debug mode using the You’ll see something like this:<\/p>\n To test our server we can use a nice tool called NTRadPing. You can download it here: ntradping<\/a>.<\/p>\n To run it, just unzip the archive and run the executable. Fill it with the credentials you created earlier, while keeping in mind that the port RADIUS uses is RADIUS Server\/port: And check the Now click send in NTRadPing<\/strong>. The output in NTRadPing should look something like this:<\/p>\n The output on the RADIUS server should look something like this:<\/p>\n And that’s it. You’ve successfully installed FreeRADIUS + daloRADIUS with MySQL on Debian 9.<\/p>\n Should you encounter any issues, don’t hesitate to get in touch with and we’ll do our best to be of assistance.<\/p>\n Pre-Installed FreeRADIUS Servers<\/p>\r\n Automatic FreeRADIUS 3 + daloRADIUS Set Up<\/span><\/p>\r\n\r\n<\/div>\r\n Instantly deploy machines with FreeRADIUS + MySQL + daloRADIUS GUI Panel already set up, receive the credentials and take over from there! You also get our custom WHMCS Module to help you manage it from our dashboard.<\/p>\r\n\r\n<\/div>\r\n Pick one of our FreeRADIUS KVM plans<\/p>\r\n\r\n<\/div>\r\n P.S. We're available for hire, if you need help. Click here to contact us<\/a>.<\/p>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":" What is FreeRADIUS? FreeRADIUS is very popular open-source RADIUS server. It’s been developed since the dial-up era, and it’s still going strong today, being used by a great deal of companies around the world, including many Fortune 500 companies. FreeRADIUS supports all of the authentication protocols and offers the AAA protocols ( Authentication, Authorization, and […]<\/p>\n","protected":false},"author":1,"featured_media":1798,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[67,64,87],"tags":[54],"class_list":["post-1794","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-debian","category-open-source","category-radius","tag-daloradius"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":6}},"featured_image_urls_v2":{"full":["https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/Install-Configure-FreeRADIUS-on-Debian-9-with-MySQL.png",1024,512,false],"thumbnail":["https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/Install-Configure-FreeRADIUS-on-Debian-9-with-MySQL-150x150.png",150,150,true],"medium":["https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/Install-Configure-FreeRADIUS-on-Debian-9-with-MySQL-300x150.png",300,150,true],"medium_large":["https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/Install-Configure-FreeRADIUS-on-Debian-9-with-MySQL-768x384.png",768,384,true],"large":["https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/Install-Configure-FreeRADIUS-on-Debian-9-with-MySQL-1024x512.png",1024,512,true],"1536x1536":["https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/Install-Configure-FreeRADIUS-on-Debian-9-with-MySQL.png",1024,512,false],"2048x2048":["https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/Install-Configure-FreeRADIUS-on-Debian-9-with-MySQL.png",1024,512,false],"pk-small":["https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/Install-Configure-FreeRADIUS-on-Debian-9-with-MySQL-80x80.png",80,80,true],"pk-thumbnail":["https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/Install-Configure-FreeRADIUS-on-Debian-9-with-MySQL-300x225.png",300,225,true]},"post_excerpt_stackable_v2":" What is FreeRADIUS? FreeRADIUS is very popular open-source RADIUS server. It’s been developed since the dial-up era, and it’s still going strong today, being used by a great deal of companies around the world, including many Fortune 500 companies. FreeRADIUS supports all of the authentication protocols and offers the AAA protocols ( Authentication, Authorization, and accounting). It’s typically used for managing users and keeping track of bandwidth usage, and it’s a popular solution for networking software such as OpenVPN, SoftEther, Squid Proxies and WiFi hotspots. In this tutorial we’ll install FreeRADIUS on a machine running Debian 9. We’ll also configure…<\/p>\n","category_list_v2":"Debian<\/a>, Open-source<\/a>, Radius<\/a>","author_info_v2":{"name":"Vlad","url":"https:\/\/draculaservers.com\/tutorials\/author\/vlad\/"},"comments_num_v2":"4 comments","yoast_head":"\nMethod 1 – Instant FreeRADIUS Server Deloyment<\/h2>\n
\r\nMethod 2 – Manual FreeRADIUS Install<\/h2>\n
Install LAMP Stack on Debian 9<\/h2>\n
$ apt update\n$ apt upgrade<\/code><\/pre>\nInstall Apache<\/h3>\n
$ apt install apache2<\/code><\/pre>\n$ systemctl status apache2\n\u25cf apache2.service - The Apache HTTP Server\n Loaded: loaded (\/lib\/systemd\/system\/apache2.service; enabled; vendor preset: \n Active: active (running) since Thu 2019-05-16 19:05:47 UTC; 8s ago\n Main PID: 29784 (apache2)\n CGroup: \/system.slice\/apache2.service\n \u251c\u250029784 \/usr\/sbin\/apache2 -k start\n \u251c\u250029786 \/usr\/sbin\/apache2 -k start\n \u2514\u250029787 \/usr\/sbin\/apache2 -k start\n\nMay 16 19:05:47 debian_radius systemd[1]: Starting The Apache HTTP Server...\nMay 16 19:05:47 debian_radius apachectl[29773]: AH00558: apache2: Could not reli\nMay 16 19:05:47 debian_radius systemd[1]: Started The Apache HTTP Server.\n...<\/code><\/pre>\nhttp:\/\/your_server_ip_or_domain<\/code>, and should see something like the following screenshot:<\/p>\n![\"apache-installed\"](\"https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/freeradius_debian_9_apache.png\")
<\/a><\/p>\nInstall MySQL on Debian 9<\/h3>\n
$ apt install mysql-server<\/code><\/pre>\n\n
$ mysql_secure_installation<\/code><\/pre>\nEnter current password for root (enter for none): Enter<\/code><\/pre>\nSetting the root password ensures that nobody can log into the MariaDB\nroot user without the proper authorisation.\n\nSet root password? [Y\/n] Y\nNew password: S0me_Str0ng_Passw0rd\nRe-enter new password: S0me_Str0ng_Passw0rd\nPassword updated successfully!\nReloading privilege tables..\n ... Success!<\/code><\/pre>\nRemove anonymous users? [Y\/n] y\n ... Success!<\/code><\/pre>\nDisallow root login remotely? [Y\/n] y\n ... Success!<\/code><\/pre>\nRemove test database and access to it? [Y\/n] y\n - Dropping test database...\n ... Success!\n - Removing privileges on test database...\n ... Success!<\/code><\/pre>\nReload privilege tables now? [Y\/n] y\n ... Success!\n\nCleaning up...<\/code><\/pre>\nInstall PHP on Debian 9<\/h3>\n
$ apt install php libapache2-mod-php php-mysql php-common php-gd php-mbstring php-curl php-xml<\/code><\/pre>\n\/etc\/apache2\/mods-available\/dir.conf<\/code> in your favorite text editor:<\/p>\n$ nano \/etc\/apache2\/mods-available\/dir.conf<\/code><\/pre>\nDirectoryIndex<\/code>.<\/p>\n\n DirectoryIndex index.php index.html index.cgi index.pl index.php index.$\n\n\n# vim: syntax=apache ts=4 sw=4 sts=4 sr noet<\/code><\/pre>\n$ systemctl restart apache2<\/code><\/pre>\nInstall FreeRADIUS on Debian 9<\/h2>\n
$ sudo apt install -y freeradius freeradius-utils freeradius-mysql<\/code><\/pre>\n$ systemctl enable freeradius<\/code><\/pre>\n$ systemctl stop freeradius<\/code><\/pre>\n$ freeradius -X<\/code><\/pre>\n...\nlisten {\n \ttype = \"acct\"\n \tipv6addr = ::\n \tport = 0\n limit {\n \tmax_connections = 16\n \tlifetime = 0\n \tidle_timeout = 30\n }\n}\nListening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel\nListening on auth address * port 1812 bound to server default\nListening on acct address * port 1813 bound to server default\nListening on auth address :: port 1812 bound to server default\nListening on acct address :: port 1813 bound to server default\nListening on proxy address * port 37669\nListening on proxy address :: port 58519\nReady to process requests<\/code><\/pre>\nroot<\/code>:<\/p>\n$ mysql -u root -p\nEnter Password: S0me_Str0ng_Passw0rd<\/code><\/pre>\ncreate database radius;\ngrant all privileges on radius.* to radius@localhost identified by 'str0ng_radius_p@ssw0rd';\nflush privileges;\nquit<\/code><\/pre>\n\/etc\/freeradius\/3.0\/mods-config\/sql\/main\/mysql\/schema.sql<\/code>:<\/p>\n$ mysql -u root -p radius < \/etc\/freeradius\/3.0\/mods-config\/sql\/main\/mysql\/schema.sql\nEnter Password: S0me_Str0ng_Passw0rd<\/code><\/pre>\nsql module<\/code> from \/etc\/freeradius\/3.0\/mods-available\/<\/code> to mods-enabled<\/code>:<\/p>\n$ ln -s \/etc\/freeradius\/3.0\/mods-available\/sql \/etc\/freeradius\/3.0\/mods-enabled\/<\/code><\/pre>\n\/etc\/freeradius\/3.0\/mods-available\/sql<\/code> with your favorite editor…<\/p>\n$ nano \/etc\/freeradius\/3.0\/mods-available\/sql<\/code><\/pre>\n#<\/code> sign at the beginning of their lines:<\/p>\ndialect = \"mysql\"\n\nserver = \"localhost\"\nport = 3306\nlogin = \"radius\"\npassword = \"str0ng_radius_p@ssw0rd\"\n\nradius_db = \"radius\"<\/code><\/pre>\nread_clients = yes<\/code>. You’ll probably see that it starts with a #<\/code> sign, which means that it’s commented out. Delete the #<\/code> sign to enable FreeRADIUS to read clients from the database. It should look like this after you’re done:<\/p>\n...\n # Set to 'yes' to read radius clients from the database ('nas' table)\n # Clients will ONLY be read on server startup.\n read_clients = yes\n...<\/code><\/pre>\nfreerad<\/code> with the following command:<\/p>\n$ chown -h freerad.freerad \/etc\/freeradius\/3.0\/mods-enabled\/sql<\/code><\/pre>\n$ systemctl restart freeradius<\/code><\/pre>\nInstall daloRADIUS on Debian 9<\/h2>\n
Prerequisites<\/h3>\n
$ apt install php-mail php-mail-mime php-pear<\/code><\/pre>\n$ pear install DB<\/code><\/pre>\nInstall daloRADIUS<\/h3>\n
$ cd\n$ wget http:\/\/liquidtelecom.dl.sourceforge.net\/project\/daloradius\/daloradius\/daloradius0.9-9\/daloradius-0.9-9.tar.gz<\/code><\/pre>\n$ tar -xzf daloradius-0.9-9.tar.gz<\/code><\/pre>\n$ mv daloradius-0.9-9 \/var\/www\/html\/daloradius<\/code><\/pre>\n$ mysql -u root -p radius < \/var\/www\/html\/daloradius\/contrib\/db\/fr2-mysql-daloradius-and-freeradius.sql\n$ mysql -u root -p radius < \/var\/www\/html\/daloradius\/contrib\/db\/mysql-daloradius.sql<\/code><\/pre>\n$ chown -R www-data:www-data \/var\/www\/html\/daloradius<\/code><\/pre>\n664<\/code>:<\/p>\n$ chmod 664 \/var\/www\/html\/daloradius\/library\/daloradius.conf.php<\/code><\/pre>\n$ nano \/var\/www\/html\/daloradius\/library\/daloradius.conf.php<\/code><\/pre>\n...\n$configValues['DALORADIUS_VERSION'] = '0.9-9';\n$configValues['FREERADIUS_VERSION'] = '2';\n$configValues['CONFIG_DB_ENGINE'] = 'mysqli';\n$configValues['CONFIG_DB_HOST'] = 'localhost';\n$configValues['CONFIG_DB_PORT'] = '3306';\n$configValues['CONFIG_DB_USER'] = 'radius';\n$configValues['CONFIG_DB_PASS'] = 'str0ng_radius_p@ssw0rd';\n$configValues['CONFIG_DB_NAME'] = 'radius';\n...<\/code><\/pre>\n$configValues['CONFIG_DB_ENGINE'] = 'mysql';<\/code> to $configValues['CONFIG_DB_ENGINE'] = 'mysqli';<\/code>, or else you may get an error when trying to log into daloRADIUS:<\/p>\nError Message: DB Error: extension not found<\/code><\/pre>\n$ systemctl restart freeradius<\/code><\/pre>\nVerifying daloRADIUS Installation<\/h3>\n
http:\/\/domain_or_server_IP\/daloradius<\/code> in your browser. In my case, I’m visiting:<\/p>\nhttp:\/\/my_server_ip\/daloradius<\/code><\/pre>\n![\"daloradius_debian_1\"](\"https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/daloradius_debian_1.png\")
<\/a><\/p>\nUsername:<\/code> Administrator<\/p>\nPassword:<\/code> radius<\/p>\n![\"daloradius_debian_dashboard\"](\"https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/daloradius_debian_dashboard.png\")
<\/a><\/p>\nTesting FreeRADIUS<\/h2>\n
Create NAS Client & User<\/h3>\n
![\"\"](\"https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2018\/12\/nas_dalo_radius.png\")
<\/a><\/p>\n![\"\"](\"https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2018\/12\/daloradius.jpg\")
<\/a><\/p>\n-X<\/code> flag:<\/p>\n$ service freeradius stop\n$ freeradius -X<\/code><\/pre>\n...\nListening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel\nListening on auth address * port 1812 bound to server default\nListening on acct address * port 1813 bound to server default\nListening on auth address :: port 1812 bound to server default\nListening on acct address :: port 1813 bound to server default\nListening on proxy address * port 46000\nListening on proxy address :: port 59411\nReady to process requests<\/code><\/pre>\nTest with NTRadPing<\/h3>\n
1812<\/code>:<\/p>\nyour_server_ip \/ 1812<\/code>
\nRADIUS Secret Key: strongsecret!<\/code>
\nPassword: Strongpassword<\/code><\/p>\nCHAP<\/code> checkbox.<\/p>\n![\"radius_test_ntradping\"](\"https:\/\/draculaservers.com\/tutorials\/wp-content\/uploads\/2019\/05\/radius_test_ntradping.png\")
<\/a><\/p>\nSending authentication request to server xx.xx.xx.xx.:1812\ntransmiting Packet, code=1 id=2 length=50\nrecieved response from the server in 145 milliseconds\nreplay packet code=3 id=2 length=20\nresponse: Access-Accept\n-------------------attribute dump------------------<\/code><\/pre>\n(0) sql: SQL-User-Name set to 'test_user1'\n(0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')\n(0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test_user1', '0x61a8a6390c46259cf64b56697fd5d78ad5', 'Access-Accept', '2019-05-06 19:00:56.660290')\n(0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test_user1', '0x61a8a6390c46259cf64b56697fd5d78ad5', 'Access-Accept', '2019-05-06 19:00:56.660290')\n(0) sql: SQL query returned: success\n(0) sql: 1 record(s) updated\nrlm_sql (sql): Released connection (6)\n(0) [sql] = ok\n(0) [exec] = noop\n(0) policy remove_reply_message_if_eap {\n(0) if (&reply:EAP-Message && &reply:Reply-Message) {\n(0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE\n(0) else {\n(0) [noop] = noop\n(0) } # else = noop\n(0) } # policy remove_reply_message_if_eap = noop\n(0) } # post-auth = ok\n(0) Sent Access-Accept Id 3 from 108.61.203.68:1812 to 213.136.66.127:56372 length 0\n(0) Finished request\nWaking up in 4.9 seconds.\n(0) Cleaning up request packet ID 3 with timestamp +6110\nReady to process requests<\/code><\/pre>\nConclusion<\/h2>\n
\r\n