103
edits
Changes
Setting up external Radius server for Hotspot authentication (view source)
Revision as of 10:35, 14 October 2024
, Yesterday at 10:35no edit summary
<p style="color:red">The information in this page is updated in accordance with [https://wiki.teltonika-networks.com/view/FW_%26_SDK_Downloads'''00.07.10'''] firmware version.</p>
__TOC__
__TOC__
Firstly, let us set a static lease for the Ubuntu machine running Radius server and configure port forwarding:
Firstly, let us set a static lease for the Ubuntu machine running Radius server and configure port forwarding:
* Login to WebUI and navigate to Network → Interfaces → LAN
* Login to WebUI and navigate to Network → DHCP → Static Leases
#Press the '''ADD''' butoon.
#Select MAC address of Ubuntu machine.
[[File:Networking Radius server Static lease v1.png|border|class=tlt-border|1095x1095px]]
#Press the '''Save & Apply''' button.
[[File:Networking Radius server LAN edit v3.png|border|class=tlt-border|1097x1097px]]
* Navigate to Network → Firewall → Port Forwards and add two new rules to forward 1812 and 1813 ports from WAN to Radius server on the same ports.
* Navigate to Network → Firewall → Port Forwards and add two new rules to forward 1812 and 1813 ports from WAN to Radius server on the same ports.
[[File:Networking Radius server Port forwards v1.png|border|class=tlt-border|1095x1095px]]
#Enter the '''desired name'''.
#In the dropdown menu scroll down to the buttom and press enter, then write one of the ports.
#Select Radius server IP.
#Press the '''ADD''' button.
[[File:Networking Radius server Port forwards v3.png|border|class=tlt-border|1095x1095px]]
* In the newly opened tab:
# Enable the instance.
# Press '''Save & Apply'''.
[[File:Networking Radius server Port forwards part2 v3.png|border|class=tlt-border|1095x1095px]]
*Create second rule same as first rule was created just change the '''port'''.
Radius server is now set with basic configuration and ready to be tested with RUT2 to authenticate Hotspot users.
Radius server is now set with basic configuration and ready to be tested with RUT2 to authenticate Hotspot users.
In order to start our Hotspot, we need to create a Wifi access point without a dedicated interface nor with any authentication:
In order to start our Hotspot, we need to create a Wifi access point without a dedicated interface nor with any authentication:
* Navigate to Network → Wireless and click add
* Navigate to Network → Wireless and click add
* Select "--No network--" in General setup → Network
* In General setup section:
[[File:Networking Radius server wireless general v1.png|border|class=tlt-border|1050x1050px]]
#Select "'''--No network--'''".
[[File:Networking Radius server wireless general v2.png|border|class=tlt-border|1050x1050px]]
#Select "No encryption" in Wireless security → Encryption
[[File:Networking Radius server wireless security v1.png|border|class=tlt-border|1088x1088px]]
#Save & Apply
[[File:Networking Radius server wireless security v2.png|border|class=tlt-border|1088x1088px]]
* Navigate to Services → Hotspot (Or install the package if it is not present by navigating to Services → Package Manager)
* Navigate to Services → Hotspot (Or install the package if it is not present by navigating to Services → Package Manager)
* Add new Hotspot instance by selecting Wireless access point created earlier
* Add new Hotspot instance by selecting Wireless access point created earlier
[[File:Networking Radius server hotspot general part1 v1.png|border|1100px|class=tlt-border|692x692px]]
* Enable the Hotspot and select Radius as Authentication mode in General settings.
* Enable the Hotspot and select Radius as Authentication mode in General settings.
[[File:Networking Radius server hotspot general v1.png|border|class=tlt-border|692x692px]]
[[File:Networking Radius server hotspot general v2.png|border|class=tlt-border|692x692px]]
* Go to Radius menu, insert Public IP of the Radius server (RUT1 WAN IP address) and Radius secret key we created for the client before.
* Go to Radius menu.
[[File:Networking Radius server Radius hotspot settings v1.png|border|class=tlt-border|730x730px]]
#Insert Public IP of the Radius server (RUT1 WAN IP address).
#Radius secret key we created for the client before.
[[File:Networking Radius server Radius hotspot settings v2.png|border|class=tlt-border|730x730px]]
Our configuration is complete.
Our configuration is complete.