Home / Small business RADIUS server for WiFi authentication

Daruk

Honorary Master
Joined
Jul 18, 2008
Messages
38,498
What's the best RADIUS solution for a home network to authenticate WiFi clients? Is there something linux based I can run on my Pi?
Anyone have such a setup and is it worth the effort?
 

sicelo.m

Well-Known Member
Joined
May 4, 2011
Messages
229
hostapd also has a built-in RADIUS server should you want to use it

from hostapd.conf:


Code:
##### Integrated EAP server ###################################################

# Optionally, hostapd can be configured to use an integrated EAP server
# to process EAP authentication locally without need for an external RADIUS
# server. This functionality can be used both as a local authentication server
# for IEEE 802.1X/EAPOL and as a RADIUS server for other devices.

# Use integrated EAP server instead of external RADIUS authentication
# server. This is also needed if hostapd is configured to act as a RADIUS
# authentication server.
eap_server=0
 

irBosOtter

Expert Member
Joined
Feb 14, 2014
Messages
2,195
What's the best RADIUS solution for a home network to authenticate WiFi clients? Is there something linux based I can run on my Pi?
Anyone have such a setup and is it worth the effort?
Currently use 2 win servers for that at home, one is the AD/DNS/DHCP server other one Certificate and Radius server, so also looking at moving to a free solution and getting rid of the two win servers
 

Genisys

Executive Member
Joined
Jan 12, 2016
Messages
9,444
Currently use 2 win servers for that at home, one is the AD/DNS/DHCP server other one Certificate and Radius server, so also looking at moving to a free solution and getting rid of the two win servers
Just a suggestion (I'm no authority when it comes to this stuff):

For AD you can change to Samba 4 AD, DNS - Bind 9, and for DHCP you can use your router/firewall. Free radius seems to be a popular option for Radius (Not sure about integration into Samba AD), and not too sure about CA, usually I use third part services for certificates, LetsEncrypt is popular for internet facing services.
 

Daruk

Honorary Master
Joined
Jul 18, 2008
Messages
38,498
Thanks all, great suggestions. I’m going to look into these.
 
Top