Systematic procedure for basic FreeRADIUS installation in LINUX:


FreeRADIUS Version: 2.X 

-          Install the server through the command “sudo apt-get install freeradius

-          Navigate to the path “/etc/freeradius/” through the command “cd /etc/freeradius/

-          To define a client or AP IP, edit /etc/freeradius/clients.conf and add its entity as below

Here AP’s IP address is and its shared secret is “SECRET”




-           For authenticating a SM ,edit "/etc/freeradius/users" file and add the username and password as below.

 Here “SM_AUTHENTICATION” is the username and “password” is the shared secret.2.jpg




-          Edit “/etc/freeradius/users” file for user authentication through radius as below

Here “USERAUTHENTICATION” is the username and “password” is the shared Secret.

“Cambium-Canopy-UserLevel” and “Cambium-Canopy-Usermode” called Vendor specific attributes (VSA).3.png





-          To add these VSA’s download the Cambium Dictionary files at and copy the downloaded files at /usr/share/freeradius/.

-          Add the name of the copied file(dictionary.canopy) by editing the file “/usr/share/freeradius/dictionary”

 Here “dictionary.canopy” is the dictionary file added.4.png







-          Add Cambium certificates by downloading them at . Unzip and copy the files at “/etc/freeradius/certs/".

The certs folder should contain files same as below





-          Finally editing “eap.conf” file as below helps freeradius to look for certificates, dictionary files and other.

-          To  copy the inner tunnel request to outer tunnel make the changes in eap.conf  as below:













-          Guide for getting started

-          Guide to troubleshoot freeraidus


-          To run the freeradius in debugging mode: freeradius –XX

-          To stop the running freeradius:service freeradius stop

-          To start the freeradius:service freeradius start

-          Always restart the freeradius after making any changes.To restart the freeradius:service freeradius restart

-          Freeradius is intelligent enough to automatically determine outer tunnel type and inner tunnel type.



Any chance an updated version of this howto exists? I’m hoping to use more up-to-date stuff. Like FreeRADIUS Version 3.0.20 on Ubuntu 20.04 or Centos 8.