Discussion:
How to configure FreeRadius as Captive Portal
ulislam.raihan
2012-03-12 20:46:34 UTC
Permalink
Hi All,

I am a new person using freeRadius server. I have a wireless access point
with WPA authentication option. It does not have any support for 802.1x or
configuring Radius server.But i want to implement some central security
using Radius server.Is it possible to configure the FreeRadius server in
such a way so that i can setup an captive portal. Any suggestion will be
highly appreciated.

Thanks
Raihan

--
View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-configure-FreeRadius-as-Captive-Portal-tp5559073p5559073.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan Buxey
2012-03-12 21:09:18 UTC
Permalink
Hi,
Post by ulislam.raihan
I am a new person using freeRadius server. I have a wireless access point
with WPA authentication option. It does not have any support for 802.1x or
configuring Radius server.But i want to implement some central security
using Radius server.Is it possible to configure the FreeRadius server in
such a way so that i can setup an captive portal. Any suggestion will be
highly appreciated.
yes - but you say you want some central security - and security doesnt go with captive portal
so suggest you change the AP to one that can do 802.1X

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
ulislam.raihan
2012-03-12 21:33:53 UTC
Permalink
Hi Alan,

Thanks for your advice. Is it possible to configure the DHCP module in
freeRadius in such a way that at first the DHCP will gave ip address of
from one subnet like 192.168.1.X and afterwards after authentication is done
then DHCP will force to change the IP address to different IP subnet like
192.168.2.X. I am planing to write a small module in Java . Whn a device
attached to Access Point. It will get IP from192.168.1.X and all the
request from this ip range will go to the java program. It will get the
user name and password from the user and then do the authentication with the
Radius server. Afrer authentication is done then the DHCP server will
change IP address of the that device.

May be i am making it more complex.
Thanks
Raihan

--
View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-configure-FreeRadius-as-Captive-Portal-tp5559073p5559220.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tim White
2012-03-12 23:35:31 UTC
Permalink
Post by ulislam.raihan
192.168.2.X. I am planing to write a small module in Java . Whn a device
attached to Access Point. It will get IP from192.168.1.X and all the
request from this ip range will go to the java program. It will get the
user name and password from the user and then do the authentication with the
Radius server. Afrer authentication is done then the DHCP server will
change IP address of the that device.
Hi Raihan.

I suggest you look at something like Coova Chilli. It uses a Radius
server to authenticate users, but does the captive portal. You can use
any access point with it, and it'll run fine on the same machine as
Freeradius. I don't suggest reinventing the wheel if you can avoid it.
If you are totally new to radius/captive portals etc, I suggest checking
out the Grase Hotspot project, all you need is a machine with 2 network
cards, install a base debian or ubuntu distro, and then install the
Grase Hotspot packages on top. It'll setup the Freeradius for you, with
Coova Chilli and a nice admin interface.

Tim

Dislaimer: The Grase Hotspot is my project, there are other hotspot
systems out there with Freeradius and Coova Chilli, but some are hard to
setup.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
ulislam.raihan
2012-03-13 08:42:50 UTC
Permalink
Hi Tim

Thanks for your advice. I will try with the Grase Hotspot. It seems very
interesting

Thanks
Raihan


--
View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-configure-FreeRadius-as-Captive-Portal-tp5559073p5560331.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Fabricio Flores
2012-03-13 11:41:19 UTC
Permalink
Hello... I Have a question... Which captive portal is the best? I tried to
configure in CentOS coovachilli and is very hard to install and
configuring... Grase Hotspot is easier?
Post by ulislam.raihan
Hi Tim
Thanks for your advice. I will try with the Grase Hotspot. It seems very
interesting
Thanks
Raihan
--
http://freeradius.1045715.n5.nabble.com/How-to-configure-FreeRadius-as-Captive-Portal-tp5559073p5560331.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
--
Fabricio A. Flores G.
Egresado en IngenierĂ­a en Sistemas

MSN: ***@hotmail.com
Google: ***@gmail.com
Twitter: fabricioflores
Skype: fabriciofloresgallardo

Blog Personal <http://fabricioflores.wordpress.com/>
Tim White
2012-03-14 09:50:31 UTC
Permalink
Post by Fabricio Flores
Hello... I Have a question... Which captive portal is the best? I
tried to configure in CentOS coovachilli and is very hard to install
and configuring... Grase Hotspot is easier?
Grase Hotspot uses Coova Chilli internally, but does the work of setting
everything up for you. It uses Debian/Ubuntu based distributions as it
makes use of packaging features to do all the hard configuration work.
The admin interface is (in my biased opinion) nice and easy to use.

Tim
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Loading...