CentOS下搭建radius服务器进行EAP认证..docVIP

CentOS 下搭建radius服务器进行EAP认证 Radius服务器端IP：8 AP端IP：9 一、安装mysql #yum install mysql; #yum install mysql-server #yum install mysql-test 二、安装freeradius #yum install freeradius #yum install freeradius-mysql 安装完freeradius过后，测试freeradius是否安装成功。测试需要用户，因此先将/etc/raddb/users文件打开，将steve前的#去掉,变成：? steve?Cleartext-Password := testing??Service-Type = Framed-User,??Framed-Protocol = PPP,??Framed-IP-Address = ,??Framed-IP-Netmask = .0,??Framed-Routing = Broadcast-Listen,??Framed-Filter-Id = ,??Framed-MTU = 1500,??Framed-Compression = Van-Jacobsen-TCP-IP这样就有了用户steve及密码testing,可以进行测试了。先启用radius: #radiusd -X如果程序正常运行，最后三行如下Listening on authentication *:1812Listening on accounting *:1813Ready to process requests.# radtest steve testing localhost 1812 testing123最后的testing123是在/etc/raddb/中定义的localhost的密码。如果结果中出现Access-Accept，说明安装成功。测试完成后将steve用户再恢复原样，即加上#注释首先要启用mysql:??# mysqladmin -u root -p create radius （b）、将radius中的sql表导入到mysql的radius数据库中# mysql -u root -p radius /etc/raddb/sql/mysql/schema.sql # mysql -u root -p radius /etc/raddb/sql/mysql/nas.sql # mysql -u root -p radius /etc/raddb/sql/mysql/ippool.sql # mysql -u root -p radius /etc/raddb/sql/mysql/wimax.sql (c)、授权# mysql -u root –p mysql GRANT SELECT ON radius.* TO radius@localhost IDENTIFIED BY radpass; mysql GRANT ALL on radius.radacct TO radius@localhost; mysql GRANT ALL on radius.radpostauth TO radius@localhost; //注意这里要选择radius数据库，不然不成功 (d)加入一些组信息:mysql insert into radgroupreply (groupname,attribute,op,value) values (user,Auth-Type,:=,Local); mysql insert into radgroupreply (groupname,attribute,op,value) values (user,Service-Type,=,Framed-User); mysql insert into radgroupreply (groupname,attribute,op,value) values (user,Framed-IP-Netmask,=,55); mysql insert into radgroupreply (groupname,attribute,op,value) values (user,Framed-IP-Netmask,:=,); //注意这里要选择radius数据库，不然后出现 no database use (e)加入用户信息：mysql INSERT INTO radcheck (UserName, Attribute, Value) VALUES (zhoulin, Password, 123456); (f)然后把用户加到组里：mysql in