Home / Small business RADIUS server for WiFi authentication

Daruk

Honorary Master
Joined
Jul 18, 2008
Messages
35,372
#1
What's the best RADIUS solution for a home network to authenticate WiFi clients? Is there something linux based I can run on my Pi?
Anyone have such a setup and is it worth the effort?
 

sicelo.m

Well-Known Member
Joined
May 4, 2011
Messages
225
#4
hostapd also has a built-in RADIUS server should you want to use it

from hostapd.conf:


Code:
##### Integrated EAP server ###################################################

# Optionally, hostapd can be configured to use an integrated EAP server
# to process EAP authentication locally without need for an external RADIUS
# server. This functionality can be used both as a local authentication server
# for IEEE 802.1X/EAPOL and as a RADIUS server for other devices.

# Use integrated EAP server instead of external RADIUS authentication
# server. This is also needed if hostapd is configured to act as a RADIUS
# authentication server.
eap_server=0
 

irBosOtter

Expert Member
Joined
Feb 14, 2014
Messages
1,700
#5
What's the best RADIUS solution for a home network to authenticate WiFi clients? Is there something linux based I can run on my Pi?
Anyone have such a setup and is it worth the effort?
Currently use 2 win servers for that at home, one is the AD/DNS/DHCP server other one Certificate and Radius server, so also looking at moving to a free solution and getting rid of the two win servers
 

Genisys

Executive Member
Joined
Jan 12, 2016
Messages
9,088
#6
Currently use 2 win servers for that at home, one is the AD/DNS/DHCP server other one Certificate and Radius server, so also looking at moving to a free solution and getting rid of the two win servers
Just a suggestion (I'm no authority when it comes to this stuff):

For AD you can change to Samba 4 AD, DNS - Bind 9, and for DHCP you can use your router/firewall. Free radius seems to be a popular option for Radius (Not sure about integration into Samba AD), and not too sure about CA, usually I use third part services for certificates, LetsEncrypt is popular for internet facing services.
 
Top