Tuesday, April 4, 2017

How to Configure FreeRadius on Kali for 802.1X Authentication

Install FreeRadius on Linux
apt-get install Freeradius*

Define a Client (Wireless Controller)
vi /etc/freeradius/3.0/clients.conf

Type i to enter INSERT mode

client name {
ipaddr = <ip address>
secret = secret-password
}

Hit ESC to exit INSERT mode

Type :wq to save changes and exit

Define a User and Password

vi /etc/freeradius/3.0/users

username Cleartext-Password := "password"

Save changes and exit

Start the Radius Server in debugging mode
freeradius -X

Test the configuration
radtest username password localhost 0 testing123

*testing123 is the default password for "localhost"


To Enable PEAP:
Edit /etc/freeradius/3.0/mods-enabled/eap
vi /etc/freeradius/3.0/mods-enabled/eap
Set the default eap type to peap

Configure MSChapv2
vi /etc/freeradius/3.0/mods-enabled/mschap
Set "use_mppe" to yes
Set "require_encryption" to yes
Set "require_strong" to yes

Restart freeradius to have changes take effect
killall freeradius
freeradius -X



No comments:

Post a Comment