Centos7 Radius服务搭建

|

ldap地址	radius地址
172.20.10.11	172.20.101.184

条件：
1、首先ldap服务器和radius服务器可以互相ping通
2、关闭防火墙
3、SELINUX=disabled

1、安装
yum install -y freeradius freeradius-utils freeradius-ldap
radiusd -X //测试 如果输出Ready to process requests，那么安装成功

2、启动radius服务
systemctl start radiusd
systemctl enable radiusd
3、测试radius本地用户
vim /etc/raddb/users
test111 Cleartext-Password := “password"

radtest test111 password 127.0.0.1 0 testing123
其中test111是用户，password是密码，testing123 是共享密钥

4、配置客户端
vim /etc/raddb/clients.conf
client office-network {
ipaddr = 192.168.0.0/16
secret = 1234567890
nas_type = other
}

client wq-network {
ipaddr = 172.20.0.0/16
secret = 1234567890
nas_type = other
}

5、启用ldap
vim /etc/raddb/mods-available/ldap

ldap {
server = ‘172.20.10.11’
port = 389
identity = ‘cn=ldap,dc=aaa,dc=com’
password = 1234567890
base_dn = 'dc=aaa,dc=com’

ln -s /etc/raddb/mods-available/ldap /etc/raddb/mods-enabled/ldap

6、编辑eap文件
cat /etc/raddb/mods-enabled/eap|grep -v “#”|grep -v "^$”
修改下面部分
default_eap_type = peap
default_eap_type = peap

7、重启radius
systemctl restart radiusd

8、测试
radtest network.wu password123 172.20.101.184 1812 1234567890
Sent Access-Request Id 165 from 0.0.0.0:38042 to 172.20.101.184:1812 length 81
User-Name = “network.wu”
User-Password = “password123”
NAS-IP-Address = 172.20.101.184
NAS-Port = 1812
Message-Authenticator = 0x00
Cleartext-Password = “password123”
Received Access-Accept Id 165 from 172.20.101.184:1812 to 0.0.0.0:0 length 20
出现 Access-Accept表示成功