Where can i find the Radius AAA server software compatible with ePMP. Would like to run it with Ubuntu Server. any recommendation or installation tips. Regards,
Hi nlisbey1167,
Here is the extract from the user guide on how to install the Radius server and here is the location where you can download the latest user guide for ePMP 1000 https://support.cambiumnetworks.com/files/epmp/
Information on Radius server and installation on Ubuntu is available starting from page 247 please have a check on the same.
I have included an extract from the same User Guide please check
Radius Server
INSTALLING FREE-RADIUS ON UBUNTU 12.04 LTS
To install the Radius server on Ubuntu 12.04 LTS, follow these instructions:
-
On the free-radius web page http://freeradius.org, download the latest package (currently
3.0.0), either from the main page or the download page. -
Extract the archive file by using the command line as shown below:
· To extract a tar.bz2 file, use the command (note the j option)
tar -jxvf freeradius-server-x.x.x.tar.bz2
· To extract a tar.gz file, use the command (note the z option)
tar -zxvf freeradius-server-x.x.x.tar.gz -
Once the files are extracted to a folder (cd freeradius-server-x.x.x), execute these
commands:
sudo apt-get install libssl-dev
sudo apt-get install libtalloc-dev
./configure
make
make install
CONFIGURING FREE-RADIUS SERVER
To configure Free-Radius server, follow these steps:
Note: IP address or subnet of the client must be configured in the clients.conf file.
Ex. – For the examples listed in the document, the subnet of the external machine is
172.22.121.0 or 192.168.0.0.
- For testing from external machines, edit /usr/local/etc/raddb/clients.conf and add an entry.
For example:
client 172.22.121.0/24 {
ipaddr = 172.22.121.0
netmask = 24
secret = cambium
proto = *
shortname = epmp1
}
client 127.0.0.0/24 {
ipaddr = 172.22.121.0
netmask = 24
secret = cambium
proto = *
shortname = epmp1
}
client 192.168.0.0/16 {
ipaddr = 192.168.0.0
netmask = 16
secret = cambium
proto = *
}
- To add EAP-TTLS Username and EAP-TTLS Password, edit usr/local/etc/raddb/user.
For example put this string at the end of file:
cambium-SubscriberModule Cleartext-Password := "cambium",
where cambium-SubscriberModule - EAP-TTLS Username and “cambium” - EAP-TTLS
- To configure free-radius key and certificate, edit /usr/local/etc/raddb/mods-available/eap
and add your certificates to folder /usr/local/etc/raddb/certs.
Locate a string such as default_eap_type, private_key_file, certificate_file
in eap file and change the value to:
default_eap_type = ttls
private_key_password = *** - according to your certificate
private_key_file = ${certdir}/***.key
certificate_file = ${certdir}/***.crt
Under the ttls section, change the following:
copy_request_to_tunnel=yes
use_tunnel_reply=yes
Note
Once these steps are performed, free-radius in debug mode can be initiated: $
radiusd –X