freeradius学习总结

官方网站:  http://freeradius.org
配置参考：http://deployingradius.com/

 

一、安装freeradius
version: 2.1.10
注意：若要使用EAP中的PEAP，TLS和TTLS，则要安装openssl和openssl-devel

# ./configure
# make
# make install

安装后，freeradius的主要配置文件都放在 /usr/local/etc/raddb/目录下，如radiusd.conf, clients.conf, eap.conf, sql.conf, users
可执行文件在 /usr/local/sbin 和/usr/local/bin目录下

 

二、操作

1. 启动freeradius

以调试模式运行     #radiusd -X

2. 测试工具
/usr/local/bin/radtest
/usr/local/bin/radeapclient
wpa_supplicant中的eapol_test

 

三、错误总结

1. recv[RADIUS]: No route to host

 

EAPOL: SUPP_BE entering state RECEIVE
recv[RADIUS]: No route to host
EAPOL: startWhen --> 0
STA 02:00:00:00:00:01: Resending RADIUS message (id=0)

Next RADIUS client retransmit in 6 seconds
recv[RADIUS]: No route to host
STA 02:00:00:00:00:01: Resending RADIUS message (id=0)

Next RADIUS client retransmit in 12 seconds
recv[RADIUS]: No route to host
Signal 2 received - terminating
EAPOL: EAP key not available
MPPE keys OK: 0  mismatch: 1
FAILURE

 

解决方法：在freeradius服务器上执行关闭防火墙
#service iptables stop

 

2. Ignoring EAP-Type/PEAP because we do not have OpenSSL support.

 

peap, tls,ttls不受freeradius支持

rlm_eap: No such sub-type for default EAP type peap
/usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap"
/usr/local/etc/raddb/sites-enabled/inner-tunnel[236]: Failed to load module "eap".
/usr/local/etc/raddb/sites-enabled/inner-tunnel[189]: Errors parsing authenticate section.

 

解决方法：安装openssl开发包openssl-devel

 

3. 其它错误发生时，查看调试状态下的打印信息
#radiusd -X