How to setup FreeRadius with Mysql and Daloradius web front end secure access for wifi vpn and more.

Easily setup and configure a freeradius server for your wifi,vpn or corporate networks,hundreds of applications from ISP and enterprise business users,to small business and home users with smaller IT networks and security configurations.Get up and running with a small digital ocean Droplet and secure access to wiif,vpn,networks,switches routers and so much more,just follow to the instructions to get a basic system setup and configured with web front end for free.

Tools and Links used in this Video:

First the list of pre requisites that are needed for installation

sudo apt-get install apache2 mysql-server php libapache2-mod-php php-mail php-mail-mime php-mysql php-gd php-common php-pear php-db php-mbstring php-xml php-curl unzip wget -y
sudo apt-get install freeradius freeradius-mysql freeradius-utils -y
sudo apt-get install libapache2-mod-php*

Login to mysql and run the secure_mysql_installation script

How to secure and configure the database

create database radius;
CREATE USER 'radiusadm'@'%' IDENTIFIED BY 'Rd$$123!';
GRANT ALL PRIVILEGES ON *.* TO 'radiusadm'@'%' WITH GRANT OPTION;
FLUSH PRIVILEGES;
exit;

Populate the database with the freeradius sql scripts,this will add the tables required to the database

nano -w /etc/freeradius/3.0/mods-available/sql

Add a symlink

ln -s /etc/freeradius/3.0/mods-available/sql /etc/freeradius/3.0/mods-enabled/

systemctl restart freeradius

Test the setup with the radcheck utility by inserting a test user and verifing authentication
insert into radcheck (id,username,attribute,op,value) values("1", "testuser", "Cleartext-Password", ":=", "badpassword123");

radtest testuser badpassword123 localhost 10 testing123

Download the Daloradius to your server

Unzip it into the /var/www/html apache directory
then set permissions so apache can read the files in /daloradius/

Add the daloradius mysql tables to the database

Configure the UFW firewall
sudo ufw status verbose

sudo ufw enable
sudo ufw logging on
sudo ufw allow 22/tcp
sudo ufw allow 1812:1813/udp
sudo ufw default deny incoming
ufw allow from yourwanip to any port 443/tcp #https from your wan to admin gui
ufw allow from 89.x.x.x to any port 443/tcp #replace with your management network wan IP.

[KarunaRajagopal]

It was a wonderful informative video. I felt there are couple of points which were not covered here are the group profile creation in Daloradius (that's the complicated part with the attributes configuration and documentation is non existent in the daloradius website). Also you had configured the radius with a working FQDN but changes in the freeradius configuration is listen to particular IP address is also missing your initial configuration was set for the radius to listen to the local host.

[rajkalra]

Very Informative, if the video volume can be increased it will be helpful

[scare]

All works fine, thank u very very much man !! Only 1 thing, i can't account users in daloradius gui, how can i do this ?

[XOvidius]

Can you do atutorial on how to configure login from a fedora desktop to daloradius?

[BackdoorDhaka]

Radius Server not respond in Mikrotik what happen Bro ?

[amarjitsharma]

were to add the ip addrs as installation on different server

[whatevah]

Funy how you blur out the database name but not adm user/password ;) Anyway, thanks for the tutorial :)

[Lacsap]

This video has one issue: you are not generating valid certificates. Since android 11 You can no longer select "do not validate" Google forces you to provide a valid certificate authority. I am steuggling since weeks to get freeradius running properly with peap and eap-tls. I had no luck so far. Everytime my certificates do not get accepted

[hujmaahmbagayah]

When trying to logging in to the new created wifi profile with the username and password it returns me to the login console again, It cannot authenticate

[hairulanwar]

mysql_secure_installation

what is the createformat password ???

i cant next tutorial!!

[janarthenansingarajah]

Hi JD
What changes would I need to make to enable the guest login portal?
Are you available for hire or to help me on a project?
Also with mysql-server replaced with mariadb what changes would I need?

[papeacendiaye]

Hi nice tuto It's the password are hashed ssha1 or MD5 did You connect with peap mschapv2????

[ashaikh]

Hi
Are you available for freelance work?

[tyronepearce]

Hi i keep getting these error on my log any idea why
Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 192.168.5.118 port 42945 proto udp

[instillenergy]

This video is dead. these instructions are incompatible with the latest versions of daloradius.