How To Configure FreeRadius on pfsense and static assign IP addresses to VPN users

Amazon Affiliate Store

Gear we used on Kit (affiliate Links)
Try ITProTV free of charge and get 30% off!

Use OfferCode LTSERVICES to get 5% off your order at

Tesla Referral Program Offer

Lawrence Systems Shirts and Swag

Digital Ocean Offer Code

HostiFi UniFi Cloud Hosting Service

Protect you privacy with a VPN from Private Internet Access

Google Fi Service Referral Code

More Of Our Affiliates that help us out and can get you discounts!

Twitter

Patreon

Our Forums

GitHub

Discord

Our Web Site

PIA Internet Access Affiliates Link
How To Configure FreeRadius on pfsense and static assign IP addresses to VPN users and create firewall rules
#pfsense #Firewalls

[zmullin]

Can you do a video where you setup 2 factor auth with openvpn ?

[chanabra]

Thanks for this. I have seen many of your videos and you have been a fantastic resource for me - configuring my network on my relatively new homelab setup. I recently decided I wanted a more formal authentication process for various services on my lab and it appears that I could use FreeRadius package on pfsense to accomplish this. This is fantastic for me as I am using a post-bug SuperMicro A1SRI-C2758 w/ 32gb ecc ram (purchased this much thinking I would virtualize pfsense on proxmox, then discovered pfsense supports atom c2758 QAT so back to baremetal) - and being a small household this is alot of hardware for a small house so I am thrilled I can get more use out of pfsense. thank you for the video keep em coming.

[marjundelarama]

Thak you sir Tom for having this video. I've been watching your videos it helps a lot. Thumbs up.

[jycannel]

I need to implement this into my stack! As always great video!

[qwerty]

loving the pfSense videos. keep it up!

[barrikin]

I'd be interested in a video detailing the linking FreeNAS to use the pfsense radius for user/group file permissions.

[cammelspit]

VERY interesting, ive never considered using an auth server like this. I do have a bunch of outward facing services and I use a reverse proxy for those but a good few of them do support using a radius server for auth, might be worth looking into. THANKS!

[mni_ml]

Thanks man, that really helped me setting my radius server to configure 2fa auth! You should do a video also explaining the 2fa configuration in pfsense, cause i couldn't find nothing really direct in that theme. Success!

[LasVegasVocalist]

Great Video Tom! I haven't used RADIUS in quite some time. I have also implemented and used TACACS+ in the data center for access to all the network hardware within. Oh those were the good ole days.

[fossdom]

I just setup FreeRADIUS last week for home wifi authentication for testing purposes, works okay.

[jeremyalbert]

Great video. I will need to implement this soon.
I setup OpenVPN and it works great for games that use DirectIP. The problem is that it doesn't work for games that use open LAN broadcasts. At least I haven't gotten it to work. Hamachi works sometimes and for some games but I need OpenVPN to work like the "Evolve" service (which is no longer available). Can this be done with OpenVPN?

[Unit]

Hi. First thanks for creating such helpful videos. I have a question about setting up Radius. Will it allow me to...
1) Set a fail limit on logins|
2) Set a retry delay after hitting the limit.
3) Alert the admin when someone hits the fail limit?

Thanks,
Rob

[dirkwauters]

Good content! Keep it coming. Big tumbs up!

[joedickinson]

Could you also use this for account auth for FreeNAS?

[harryrickenbach]

How about using free RADIUS for authentication for Wi-Fi

[emilhuseynli]

Hi Tom, you are assigning a static IP to VPN user via RADIUS settings, but I've noticed that the same effect can be achieved by using 'VPN/OpenVPN/Client Specific Overrides'. There you can override the 'IPv4 Tunnel Network' setting, which results in a user getting that specific IP on establishing a VPN connection. In addition you can also define other user specific settings like dns servers. What do you think about it, is it a proper way to set a static IP? :)

[abdraoufx]

awesome i needed this and didn't even know it existed

[eyurtese]

Hi, it is a quite nice video. You said you do not like to do unnecessary settings :) but you have setup accounting server for freeradius. Yet you did not check the accounting logs etc.
Where are they and how do you check it?

[TMC-CSG]

Thanks Tom, Fantastic tutorial! Is it possible without creating different users to allow a single authentication login that would assign the first connection to connect to a specific address, but allow them to be assigned to a pool if they sign in under multiple devices?

[bytetime]

Trying to setup a Radius server on PFSense to do Mac address authentication to allocate VLANs on my home network using PFSense and Unifi so I can move my IOT devices to their own VLAN and if they get moved on my network I don't have to reconfigure/tag ports because something got moved.