{"id":32262,"date":"2025-04-23T14:46:08","date_gmt":"2025-04-23T06:46:08","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/32262.html"},"modified":"2025-04-23T14:46:08","modified_gmt":"2025-04-23T06:46:08","slug":"%e3%80%90%e6%97%a0%e7%ba%bfap%e4%bc%81%e4%b8%9a%e7%ba%a7%e8%ae%a4%e8%af%81%e4%b9%8b%e6%90%ad%e5%bb%bafreeradius%e6%9c%8d%e5%8a%a1%e5%99%a8%ef%bc%88%e4%b8%80%ef%bc%89%e3%80%91","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/32262.html","title":{"rendered":"\u3010\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff08\u4e00\uff09\u3011"},"content":{"rendered":"

\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668（\u4e00）<\/h2>\n

\u9610\u8ff0\u4e00\u6b21\u642d\u5efaFreeRadius\u670d\u52a1\u5668\u7ecf\u5386（2024\/03\/13）（freeradius2.2.8）<\/p>\n

1\u3001\u73af\u5883\u7ec4\u7f51：\u865a\u62df\u673a\u2014\u2014\u534e\u4e3aAP- – – – -\u7ec8\u7aef<\/h3>\n

（\u65e0\u6570\u636e\u5e93） \u865a\u62df\u673a：VMware Workstation 17Pro，17.5.0(ubuntu-16.04.7-desktop-amd64.iso)\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \u534e\u4e3aAP:\u578b\u53f7AirEngine5762-12，\u80d6\u6a21\u5f0f（\u652f\u6301\u4f01\u4e1a\u8ba4\u8bc1\u5c31\u53ef） \u624b\u673a： \u8363\u8000magic3 elz-an00（\u5f53\u524d\u624b\u673a\u57fa\u672c\u90fd\u53ef）<\/p>\n

2\u3001\u5b89\u88c5freeradius<\/h3>\n

\u5b89\u88c5\u8f6f\u4ef6\u5305\u547d\u4ee4
\n$ sudo apt-get install openssl libssl-dev
\n$ sudo apt-get install freeradius \/\/\u5b89\u88c5（\u7248\u672c\u9ed8\u8ba42.2.8）<\/p>\n

$ sudo dpkg -l | grep radius\/\/\u68c0\u67e5\u547d\u4ee4<\/p>\n

\u6b63\u5e38\u60c5\u51b5\u4e0b\u5e94\u8be5\u663e\u793a\u5b89\u88c5\u4e86\u5982\u4e0b\u7684\u8f6f\u4ef6\u5305: freeradius freeradius-common freeradius-utils libfreeradius2 \u5982\u679c\u7f3a\u5c11\u5176\u4e2d\u7684\u6587\u4ef6， \u53ef\u4ee5\u4f7f\u7528 apt-get \u5355\u72ec\u5b89\u88c5<\/p>\n

\u5b89\u88c5freeradius\u6210\u529f\u540e， \u6267\u884c\u5982\u4e0b\u7684\u547d\u4ee4\u6765\u6d4b\u8bd5<\/p>\n

$ sudo service freeradius stop\/\/\u505c\u6b62
\n$ sudo freeradius -X\/\/\u542f\u52a8<\/p>\n

\u5982\u679c\u770b\u5230\u6709\u5982\u4e0bReady to process requests\u7684\u8f93\u51fa： \"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \u5219\u8bf4\u660efreeradius\u542f\u52a8\u6b63\u5e38<\/p>\n

3\u3001freeradius-utils\u4e2d\u7684\u6d4b\u8bd5\u5de5\u5177<\/h3>\n

freeradius-utils \u8f6f\u4ef6\u5305\u5305\u542b\u4e00\u7cfb\u5217\u7684\u6d4b\u8bd5\u5de5\u5177\u7528\u4e8e\u6d4b\u8bd5\u4e0d\u540c\u7684\u8ba4\u8bc1\u65b9\u5f0f（\u90fd\u662f\u77e5\u8bc6，\u8bb0\u5f55\u4e0b） radclient \/\/\u7528\u4e8e\u5411radius server\u53d1\u9001radius packet\u5e76\u63a5\u6536\u56de\u590d raddebug \/\/\u7528\u4e8e\u663e\u793aradius server\u7684debug\u4fe1\u606f radeapclient \/\/\u7528\u4e8e\u5411radius server\u53d1\u9001EAP packet radlast \/\/\u4ecewtmp \u6587\u4ef6\u4e2d\u83b7\u53d6\u6700\u540e\u7684accounting log\u5e76\u663e\u793a radmin \/\/freeradius demo\u7684\u7ba1\u7406\u5de5\u5177 radsniff \/\/wrapp libpcap， \u7528\u4e8edump radius\u534f\u8bae\u6d88\u606f radsqlrelay \/\/\u4f20\u9012SQL\u67e5\u8be2\u5230\u4e00\u4e2a\u96c6\u4e2d\u7684\u6570\u636e\u5e93\u670d\u52a1\u5668 radtest \/\/radclient\u7684\u524d\u7aef， \u7528\u4e8e\u5411radius server\u53d1\u9001\u8bbf\u95ee\u8bf7\u6c42\u5e76\u63a5\u6536\u56de\u590d radwatch \/\/\u7528\u4e8e\u542f\u52a8\u548c\u76d1\u63a7radius server， \u5f53radius server\u9000\u51fa\u65f6， \u8d1f\u8d23\u91cd\u542f radwho \/\/\u663e\u793a\u5f53\u524d\u5728\u7ebf\u7684user radzap \/\/radwho\u4ece\u6570\u636e\u5e93\u6216\u8005\u6587\u4ef6\u4e2d\u83b7\u53d6\u5f53\u524d\u5728\u7ebf\u7684user\u7684\u4fe1\u606f， \u6709\u65f6\u5019\u8fd9\u4e9b\u4fe1\u606f\u6ca1\u6709\u540c\u6b65，radzap \u7528\u4e8e\u540c\u6b65\u8fd9\u4e9b\u4fe1\u606f<\/p>\n

4. \u5b89\u88c5eapol_test<\/h3>\n

\u5728\u6d4b\u8bd5eap\u8ba4\u8bc1\u65f6， \u8fd8\u9700\u8981\u5b89\u88c5 eapol_test \u5de5\u5177， eapol_test \u662f wpa_supplicant \u4e2d\u7684\u4e00\u4e2a\u6d4b\u8bd5\u5de5\u5177，\u5728wpa_supplicant \u5b98\u7f51 \u53ef\u4e0b\u8f7dwpa_supplicant \u6e90\u7801，\u81ea\u884c\u7f16\u8bd1,\u4f8b\u5982<\/p>\n

$ wget http:\/\/w1.fi\/releases\/wpa_supplicant-2.5.tar.gz<\/p>\n

wpa_supplicant \u9ed8\u8ba4\u4f7f\u7528netlink， \u56e0\u6b64， \u9700\u8981\u5148\u5b89\u88c5netlink\u7684lib\u5e93，\u4ee5\u4f7f\u7528\u7684ubuntu 16.04\u4e3a\u4f8b<\/p>\n

$ sudo apt-get install libnl-3-200
\n$ sudo apt-get install libnl-3-dev
\n$ sudo apt-get install libnl-genl-3-200
\n$ sudo apt-get install libnl-genl-3-dev<\/p>\n

\u7136\u540e， \u8fdb\u5165wpa_supplicant \u7684\u6e90\u7801\u76ee\u5f55\u8fdb\u884c\u7f16\u8bd1<\/p>\n

$ apt install vim\/\/\u540e\u9762\u4fee\u6539\u6587\u4ef6\u9700\u8981vim\u5de5\u5177
\n$ tar xzvf wpa_supplicant-2.5.tar.gz
\n$ cd wpa_supplicant-2.5\/wpa_supplicant
\n$ cp defconfig .config
\n$ vim .config<\/p>\n

\/\/\u53bb\u6389 \u201c#CONFIG_EAPOL_TEST=y\u201d \u524d\u7684\u6ce8\u91ca \/\/\u53bb\u6389 \u201c#CONFIG_LIBNL32=y\u201d \u524d\u7684\u6ce8\u91ca<\/p>\n

$ make eapol_test\/\/\u7f16\u8bd1<\/p>\n

\u7136\u540e\u5b89\u88c5\u7f16\u8bd1\u51fa\u7684 eapol_test<\/p>\n

$ sudo cp eapol_test \/usr\/local\/bin
\n$ sudo chmod a+x \/usr\/local\/bin\/eapol_test<\/p>\n

freeradius\u7684\u914d\u7f6e\u6587\u4ef6\u4e3a\u5b58\u653e\u5728 \u201c\/etc\/freeradius\/\u201d \u76ee\u5f55\u4e0b\u7684 *.conf， \u4e0d\u540c\u7684\u914d\u7f6e\u6587\u4ef6\u6709\u7740\u4e0d\u540c\u7684\u4f5c\u7528， \u5176\u4e2d\u5e38\u7528\u7684\u6709<\/p>\n

clients.conf : \u5bf9radius client\u8fdb\u884c\u914d\u7f6e eap.conf : \u5bf9eap\u8ba4\u8bc1\u65b9\u5f0f\u8fdb\u884c\u914d\u7f6e radiusd.conf : \u5bf9radius server\u8fdb\u884c\u914d\u7f6e users : freeradius\u53ef\u4ee5\u4f7f\u7528\u6587\u4ef6\u548c\u6570\u636e\u5e93\u6765\u4fdd\u5b58user\u4fe1\u606f， \u5f53\u4f7f\u7528\u6587\u4ef6\u6765\u4fdd\u5b58user\u4fe1\u606f\u65f6， \u5728\u6b64\u6587\u4ef6\u4e2d\u4fdd\u5b58<\/p>\n

5.1 radiusd.conf<\/h4>\n

radiusd.conf \u4e2d\u7684\u5185\u5bb9\u57fa\u672c\u4e0a\u4fdd\u6301\u9ed8\u8ba4\u503c\u5c31\u53ef\u4ee5\u4f7f\u7528， \u9700\u8981\u6ce8\u610f\u5982\u4e0b\u51e0\u4e2a\u90e8\u5206<\/p>\n

listen{
\n type = auth #\u53ef\u53d6\u503c\u6709 auth, acct, proxy, detail, status, coa
\n ipaddr = * #\u53ef\u4ee5\u662f\u57df\u540d，\u6216\u8005ip， \u6216\u8005*\u4ee3\u8868\u901a\u914d
\n port = 0 #\u7aef\u53e3\u53f7， 0\u4ee3\u8868\u4ece \/etc\/services \u4e2d\u8bfb\u53d6 (\u9ed8\u8ba4\u4e3a1812)
\n}<\/p>\n

freeradius\u652f\u6301 \u8ba4\u8bc1\/\u8ba1\u8d39 \u7b49\u529f\u80fd， \u6211\u4eec\u53ea\u5173\u6ce8\u8ba4\u8bc1\u529f\u80fd， \u56e0\u6b64\u53ea\u5173\u6ce8 auth \u7c7b\u578b\u7684 listen\u5757\u5373\u53ef<\/p>\n

ipaddr\u548cport\u7528\u4e8e\u6307\u5b9afreeradius\u7ed1\u5b9a\u7684IP\u5730\u5740\u548c\u7aef\u53e3\u53f7， \u6709\u4e9b\u7cfb\u7edf\u4e0a\u9762\u652f\u6301\u5728\u4e00\u4e2a\u7f51\u7edc\u63a5\u53e3\u4e0a\u8bbe\u7f6e\u591a\u4e2aip， \u6b64\u65f6\u9700\u8981\u8be6\u7ec6\u6307\u5b9a ipaddr \u548c port， \u4e00\u822c\u60c5\u51b5\u4e0b\u4e0d\u9700\u8981\u4fee\u6539<\/p>\n

modules {
\n ……
\n #$INCLUDE eap.conf
\n #$INCLUDE sql.conf
\n ……
\n}<\/p>\n

\u5f53\u9700\u8981\u4f7f\u7528eap\u8ba4\u8bc1\u7684\u529f\u80fd\u65f6， \u5219\u9700\u8981\u53bb\u6389 \u201cINCLUDE eap.conf\u201d \u524d\u7684\u6ce8\u91ca#， \u5f53\u9700\u8981\u4f7f\u7528\u6570\u636e\u5e93\u6765\u5b58\u50a8user\u4fe1\u606f\u65f6， \u5219\u9700\u8981\u53bb\u6389 \u201c$INCLUDE sql.conf\u201d \u524d\u7684\u6ce8\u91ca# \u540e\u7eed\u7684\u6d4b\u8bd5\u5c06\u4f1a\u53ea\u4f7f\u7528\u6587\u4ef6\u7684\u65b9\u5f0f\u6765\u5b58\u50a8user\u4fe1\u606f；\u4e0d\u4f7f\u7528\u6570\u636e\u5e93<\/p>\n

5.2 clients.conf<\/h4>\n

clients.conf \u6587\u4ef6\u4e2d， \u4f7f\u7528 client \u5757\u6765\u914d\u7f6e\u4e00\u4e2a radius client<\/p>\n

client Name { \/\/Name \u4e3aclient\u7684\u540d\u79f0， \u81ea\u884c\u5b9a\u4e49
\n ipaddr = \/\/client \u7684ip\u5730\u5740 \u6216\u8005\u4e3b\u673a\u540d
\n #ipv6addr = \/\/ipv6 \u5730\u5740<\/p>\n

#netmask = \/\/\u5b50\u7f51\u63a9\u7801， \u548cipaddr \u4e0d\u5728\u4e00\u4e2a\u7f51\u6bb5\u7684ip\u7684packet\u8bb2\u88ab\u5ffd\u7565, \u9ed8\u8ba4\u4e3a32
\n secret = \/\/client\u7684\u5bc6\u7801<\/p>\n

require_message_authenticator = \/\/\u8001\u5f0f\u7684client\u5728Access-Request\u4e2d\u4e0d\u5305\u542bMessage-Authenticator， \u800c RFC 5080 \u5f3a\u5236\u8981\u6c42\u5305\u542b\u8fd9\u4e00\u9879
\n \/\/\u8fd9\u4e00\u914d\u7f6e\u9879\u5b9a\u4e49client\u662f\u5426\u5305\u542bMessage-Authenticator， \u5982\u679c\u5b9a\u4e49\u4e3ayes， \u4f46\u662f\u5b9e\u9645\u4e0a\u6ca1\u6709\u5305\u542b， \u5219\u8bf7\u6c42\u4f1a\u88ab\u5ffd\u7565
\n nastype = \/\/NAS type, \u666e\u901a\u7684\u8def\u7531\u8bbe\u7f6e\u4e3a other \u5373\u53ef
\n}<\/p>\n

\u5982\u4e0b\u56fe： \"clients.conf\" \u6216\u8005 \"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"<\/p>\n

clients.conf\u4e2d\u9884\u5b9a\u4e49\u4e86\u4e00\u4e2aclient \u201clocalhost\u201d \u7528\u4e8e\u6d4b\u8bd5<\/p>\n

client localhost{
\nipaddr = 127.0.0.1
\n secret = testing123
\n require_message_authenticator = no
\n nastype = other
\n}<\/p>\n

5.3 users<\/h4>\n

users\u6587\u4ef6\u7528\u4e8e\u6dfb\u52a0user， \u4f8b\u5982<\/p>\n

testuser Cleartext-Password := "testpswd"<\/p>\n

\u5373\u6dfb\u52a0\u4e86\u4e00\u4e2a\u540d\u4e3a testuser \u7684user， \u5176\u5bc6\u7801\u4e3a testpswd<\/p>\n

\u8fd8\u53ef\u4ee5\u5728users\u6587\u4ef6\u4e2d\u6307\u5b9a\u67d0\u4e00\u4e2auser\u7684\u8ba4\u8bc1\u7ed3\u679c， \u4f8b\u5982<\/p>\n

lameuser Auth-Type := Reject
\n Reply-Message = "Your account has been disabled."<\/p>\n

\u5373\u9488\u5bf9user \u201clameuser\u201d， \u76f4\u63a5\u62d2\u7edd\u5176\u8ba4\u8bc1\u8bf7\u6c42<\/p>\n

6. \u751f\u6210EAP\u8ba4\u8bc1\u6240\u9700\u7684\u8bc1\u4e66<\/h3>\n

EAP\u8ba4\u8bc1\u6700\u591a\u9700\u89813\u4efd\u8bc1\u4e66(EAP-TLS)：<\/p>\n

CA \u8bc1\u4e66
\nserver \u7aef\u8bc1\u4e66
\nclient \u7aef\u8bc1\u4e66<\/p>\n

\u5728linux\u4e0a\u53ef\u4ee5\u4f7f\u7528 openssl \u547d\u4ee4\u6765\u751f\u6210\u8fd9\u4e9b\u8bc1\u4e66，\u53ef\u4ee5\u4f7f\u7528\u201cmake-certs.sh\u6765\u534f\u52a9\u751f\u6210\u6240\u9700\u7684\u8bc1\u4e66\u201d(\u521b\u5efa\u4e00\u4e2a\u53ef\u6267\u884c+x\u7684\u6587\u4ef6make-certs.sh，\u5185\u5bb9\u5982\u4e0b)<\/p>\n

#!\/bin\/sh<\/p>\n

rsa_bits=2048
\npswd_in=123456
\npswd_out=123456<\/p>\n

dn_C=CN
\ndn_ST=JS
\ndn_L=SZ
\ndn_O=radius
\ndn_OU=freeradius
\ndn_EA="sven@xxx.com"
\ndn_CN_ca=ca
\ndn_CN_server=server
\ndn_CN_client=client<\/p>\n

rm demoCA -rf
\nmkdir -p demoCA\/newcerts\/
\ntouch demoCA\/index.txt
\necho 01 > demoCA\/serial<\/p>\n

#generate self signed CA cert
\nopenssl req -new -x509 -passout pass:$pswd_out -subj \/C=$dn_C\/ST=$dn_ST\/L=$dn_L\/O=$dn_O\/OU=$dn_OU\/CN=$dn_CN_ca\/emailAddress=$dn_EA -keyout ca.key -out ca.pem <\/p>\n

#generate server and client cert request
\nopenssl req -new -passout pass:$pswd_out -subj \/C=$dn_C\/ST=$dn_ST\/L=$dn_L\/O=$dn_O\/OU=$dn_OU\/CN=$dn_CN_server\/emailAddress=$dn_EA -keyout server.key -out server.csr
\nopenssl req -new -passout pass:$pswd_out -subj \/C=$dn_C\/ST=$dn_ST\/L=$dn_L\/O=$dn_O\/OU=$dn_OU\/CN=$dn_CN_client\/emailAddress=$dn_EA -keyout client.key -out client.csr<\/p>\n

#sign server and client request whith CA cert
\nopenssl ca -in server.csr -out server.pem -cert ca.pem -keyfile ca.key -passin pass:$pswd_in
\nopenssl ca -in client.csr -out client.pem -cert ca.pem -keyfile ca.key -passin pass:$pswd_in<\/p>\n

\u8fd0\u884c\u8fc7\u7a0b\u4e2d， \u9700\u8981\u786e\u8ba4\u662f\u5426\u5bf9server\u7aef\u8bc1\u4e66\u548cclient\u7aef\u8bc1\u4e66\u8fdb\u884c\u7b7e\u540d， \u8f93\u5165\u201cy\u201d\u5373\u53ef \u8fd0\u884c\u5b8c\u6210\u540e， \u751f\u6210\u7684\u8bc1\u4e66\u5982\u4e0b：<\/p>\n

ca.key : CA\u8bc1\u4e66\u7684\u516c\u79c1\u94a5\u5bf9 ca.pem : CA\u8bc1\u4e66， PEM\u683c\u5f0f（\u7ec8\u7aef\u7528\u6237\u5b89\u88c5CA\u6839\u8bc1\u4e66(WLAN-\u66f4\u591aWLAN\u8bbe\u7f6e-\u5b89\u88c5\u8bc1\u4e66)） server.key ： server\u7aef\u8bc1\u4e66\u7684\u516c\u79c1\u94a5\u5bf9 server.pem ： server\u7aef\u8bc1\u4e66， PEM\u683c\u5f0f client.key ： client\u7aef\u8bc1\u4e66\u7684\u516c\u79c1\u94a5\u5bf9 client.pem ： server\u7aef\u8bc1\u4e66， PEM\u683c\u5f0f<\/p>\n

\u5728 \u201c\/etc\/freeradius\/certs\/\u201d\u4e0b\u65b0\u5efa\u201ctest\u201d\u76ee\u5f55， \u7136\u540e\u5c06\u4e0a\u8ff0\u7684 ca.pem, server.pem, server.key \u62f7\u8d1d\u5230\u8be5\u76ee\u5f55\u4e2d， \u7136\u540e\u4fee\u6539eap.conf \u4e2d\u7684 tls \u5757（- :\u8868\u793a\u4fee\u6539\u524d； + :\u8868\u793a\u4fee\u6539\u540e）：<\/p>\n

– certdir = ${confdir}\/certs
\n+ certdir = ${confdir}\/certs\/test<\/p>\n

– cadir = ${confdir}\/certs
\n+ cadir = ${confdir}\/certs\/test<\/p>\n

– private_key_password = whatever
\n+ private_key_password = 123456<\/p>\n

frreradius\u4e2d PEAP \u548c TTLS \u6a21\u5757\u90fd\u4f9d\u8d56\u4e8e TLS，\u3000\u56e0\u6b64\u53ea\u8981\u4f7f\u7528\u8bc1\u4e66\u8ba4\u8bc1\u65f6，\u3000\u5c31\u9700\u8981\u914d\u7f6e\u597dTLS<\/p>\n

7. \u672c\u5730\u6d4b\u8bd5\u73af\u5883<\/h3>\n

\u5728 \u201c\/etc\/freeradius\/users\u201d\u3000\u4e2d\u6dfb\u52a0\u4e00\u4e2a\u6d4b\u8bd5\u7528\u6237 testuser， \u5bc6\u7801\u4e3a userpswd<\/p>\n

testuser Cleartext-Password := "userpswd"<\/p>\n

7.1 \u6d4b\u8bd5\u6dfb\u52a0\u7684 testuser<\/h4>\n

\u8fd9\u4e00\u6b65\u76ee\u7684\u662f\u6d4b\u8bd5\u4e0a\u4e00\u6b65\u4e2d\u6dfb\u52a0\u7684 testuser \u53ef\u7528, \u901a\u8fc7radtest\u547d\u4ee4， \u4f7f\u7528\u9884\u7f6e\u7684 client \u201clocalhost\u201d \u5411radius server\u53d1\u9001radius packet\u6765\u8fdb\u884c\u6d4b\u8bd5, radtest\u7684usage\u5982\u4e0b<\/p>\n

$ radtest [OPTIONS] user passwd radius-server[:port] nas-port-number secret<\/p>\n

\u5176\u4e2d， nas-port-number \u6ca1\u6709\u7528\u5230\u65f6， \u7f6e0\u5373\u53ef \u9996\u5148， \u5728notebook\u4e0a\u4ee5\u8c03\u8bd5\u6a21\u5f0f\u542f\u52a8freeradius<\/p>\n

$ sudo service freeradius stop
\n$ sudo freeradius -X \/\/\u542f\u52a8freeradius，\u6309\u7167\u539f\u94fe\u63a5\u8fd9\u91cc\u53ef\u80fd\u4f1a\u542f\u52a8\u5931\u8d25；\u770b\u662f\u5426\u62a5\u9519\u5173\u4e8edh<\/p>\n

freeradius\u542f\u52a8\u5931\u8d25dh\u95ee\u9898\u89e3\u51b3\u65b9\u6cd5：\u628a\/etc\/freeradius\/certs\u76ee\u5f55\u4e0b\u7684dh\u6587\u4ef6\u62f7\u8d1d\u5230test\u76ee\u5f55\u4e0b<\/p>\n

cp \/etc\/freeradius\/certs\/dh \/etc\/freeradius\/certs\/test\/<\/p>\n

\u91cd\u65b0\u542f\u52a8FreeRadius； \u7136\u540e\u65b0\u5f00\u4e00\u4e2a\u7ec8\u7aef， \u6267\u884c\u6d4b\u8bd5\u7a0b\u5e8f<\/p>\n

$ radtest testuser userpswd 127.0.0.1 0 testing123<\/p>\n

\u8fd4\u56de\u5982\u4e0b\u7684\u5185\u5bb9<\/p>\n

rad_recv: Access-Accept packet from host 127.0.0.1 port 1812\u3000…..<\/p>\n

\u8bf4\u660e\u8ba4\u8bc1\u8bf7\u6c42\u88ab\u901a\u8fc7<\/p>\n

8. \u4e0d\u540c\u52a0\u5bc6\u65b9\u5f0f<\/h3>\n

\u6d4b\u8bd5\u4e0d\u540c\u52a0\u5bc6\u65b9\u5f0f\u524d， \u8bf7\u786e\u4fdd \/etc\/freeradius\/radiusd.conf \u4e2d\u7684 modules \u5757\u4e2d\u7684 \u201c$INCLUDE eap.conf\u201d \u8bed\u53e5\u672a\u88ab\u6ce8\u91ca\u6389<\/p>\n

1\u3001EAP-MD5<\/h4>\n

\u4fee\u6539 eap.conf , \u6307\u5b9a\u9ed8\u8ba4\u7684eap \u65b9\u5f0f\u4e3amd5；<\/p>\n

eap {
\n ……
\n default_eap_type = md5
\n ……
\n}<\/p>\n

\u7136\u540e\u542f\u52a8freeradius<\/p>\n

$ sudo service freeradius stop
\n$ sudo freeradius -X<\/p>\n

2\u3001EAP-TLS<\/h4>\n

\u540c\u7406\u4fee\u6539<\/p>\n

eap {
\n ……
\n default_eap_type = tls
\n ……
\n}<\/p>\n

\u7136\u540e\u542f\u52a8freeradius （\u6293\u5305\u672a\u751f\u6548，\u53ea\u6709\u7b2c\u4e00\u4e2achallenge\u5305\u662ftls,\u540e\u9762\u7684challenge\u53d8\u56depeap;\u540e\u6765\u91c7\u7528\u4e86\u7b2c\u4e8c\u6b21\u5b89\u88c5freeradius3.0\u7248\u672c）<\/p>\n

3\u3001EAP-PEAP<\/h4>\n

\u540c\u7406\u4fee\u6539<\/p>\n

eap {
\n ……
\n default_eap_type = peap
\n ……
\n}<\/p>\n

\u7136\u540e\u542f\u52a8freeradius EAP-PEAP\u8ba4\u8bc1\u53ef\u4ee5\u9009\u62e9\u5728client\u7aef\u4f7f\u7528\u6839\u8bc1\u4e66\u9a8c\u8bc1server\u7aef\u8bc1\u4e66<\/p>\n

EAP-TLS-Require-Client-Cert = Yes \/\/eap.conf\u4e2d\u5fc5\u987b\u6821\u9a8cTLS\u8bc1\u4e66\u5b57\u6bb5，\u6211\u5b9e\u9645\u5b9e\u9a8c\u65e0\u6548；\u53ef\u80fd\u662f\u6211\u7684\u8bc1\u4e66\u95ee\u9898，\u5bfc\u81f4\u6211TLS\u4f7f\u7528\u7b2c\u4e8c\u6b21\u4e0d\u540c\u7cfb\u7edf\u5b89\u88c5；\u5f85\u5176\u4ed6\u4eba\u5c1d\u8bd5<\/p>\n

\u7ec8\u7aef\u7528\u6237\u5b89\u88c5CA\u8bc1\u4e66(WLAN-\u66f4\u591aWLAN\u8bbe\u7f6e-\u5b89\u88c5\u8bc1\u4e66)<\/p>\n

4\u3001\u6d4b\u8bd5 EAP-TTLS<\/h4>\n

eap {
\n ……
\n default_eap_type = ttls
\n ……
\n}<\/p>\n

\u652f\u6301PAP，CHAP，MSCHAPV2\u4ee5\u53ca\u652f\u6301\u8bc1\u4e66\u9a8c\u8bc1；\u622a\u6b622024\/03\/12 TLS\u8ba4\u8bc1\u5931\u8d25<\/p>\n

\u5ba2\u6237\u7aef\u4fa7\u914d\u7f6eradius\u670d\u52a1\u5668\u5730\u5740，\u8ba4\u8bc1\u7aef\u53e3\u53f7，\u5171\u4eab\u5bc6\u94a5 \u670d\u52a1\u5668\u5730\u5740\u901a\u8fc7ifconfig&dhclient\u76f8\u5173\u547d\u4ee4\u914d\u7f6e \u8ba4\u8bc1\u7aef\u53e3\u53f7\u9ed8\u8ba41812，\u5728\/etc\/services\u4e2d； \u5171\u4eab\u5bc6\u94a5\u914d\u7f6e\u5728clients.conf \"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \u7528\u6237\u5173\u8054\u65f6\u51fa\u73b0\u5e38\u89c1\u62a5\u9519： Ignoring request to authentication address * port 1812 from unknown client 192.168.66.73 port 48774 Ready to process requests.<\/p>\n

\u5ba2\u6237\u7aef\u7f51\u6bb5\u672a\u914d\u7f6e\u8fdbclients.conf<\/p>\n

\u7b2c\u4e8c\u6b21\u65e0\u7ebfAP\/STA\u7684TLS\u53cc\u5411\u8bc1\u4e66\u52a0\u5bc6\u8ba4\u8bc1\u4e0b\u4e2a\u5e16\u5b50<\/p>\n

\u6700\u540e，\u611f\u8c22\u671f\u5f85\u9753\u5973\u5e05\u54e5\u4ee5\u53ca\u8001\u677f\u4eec\u7684\u6253\u8d4f，\u795d\u60a8\u8eab\u4f53\u5065\u5eb7，\u4e07\u4e8b\u5982\u610f，\u7b11\u53e3\u5e38\u5f00 \"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"<\/p>\n","protected":false},"excerpt":{"rendered":"

\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb3.5k\u6b21\uff0c\u70b9\u8d5e31\u6b21\uff0c\u6536\u85cf44\u6b21\u3002\u672c\u6587\u6863\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u5982\u4f55\u5728Ubuntu 16.04\u4e0a\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff0c\u7528\u4e8e\u4f01\u4e1a\u7ea7\u65e0\u7ebfAP\u7684EAP\u8ba4\u8bc1\u3002\u5185\u5bb9\u5305\u62ec\u73af\u5883\u7ec4\u7f51\u3001Freeradius\u7684\u5b89\u88c5\u4e0e\u914d\u7f6e\u3001eapol_test\u5de5\u5177\u7684\u5b89\u88c5\u3001\u8bc1\u4e66\u7684\u751f\u6210\u4ee5\u53caEAP-MD5\u3001EAP-TLS\u3001EAP-PEAP\u7b49\u4e0d\u540c\u52a0\u5bc6\u65b9\u5f0f\u7684\u6d4b\u8bd5\u3002\u901a\u8fc7\u8fd9\u4e2a\u8fc7\u7a0b\uff0c\u8bfb\u8005\u53ef\u4ee5\u5b66\u4e60\u5230\u65e0\u7ebfAP\u8ba4\u8bc1\u7684\u5b9e\u73b0\u6b65\u9aa4\u548c\u76f8\u5173\u5de5\u5177\u7684\u4f7f\u7528\u3002<\/p>\n","protected":false},"author":2,"featured_media":32256,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[43,44],"topic":[],"class_list":["post-32262","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-43","tag-44"],"yoast_head":"\n\u3010\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff08\u4e00\uff09\u3011 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/32262.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u3010\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff08\u4e00\uff09\u3011 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb3.5k\u6b21\uff0c\u70b9\u8d5e31\u6b21\uff0c\u6536\u85cf44\u6b21\u3002\u672c\u6587\u6863\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u5982\u4f55\u5728Ubuntu 16.04\u4e0a\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff0c\u7528\u4e8e\u4f01\u4e1a\u7ea7\u65e0\u7ebfAP\u7684EAP\u8ba4\u8bc1\u3002\u5185\u5bb9\u5305\u62ec\u73af\u5883\u7ec4\u7f51\u3001Freeradius\u7684\u5b89\u88c5\u4e0e\u914d\u7f6e\u3001eapol_test\u5de5\u5177\u7684\u5b89\u88c5\u3001\u8bc1\u4e66\u7684\u751f\u6210\u4ee5\u53caEAP-MD5\u3001EAP-TLS\u3001EAP-PEAP\u7b49\u4e0d\u540c\u52a0\u5bc6\u65b9\u5f0f\u7684\u6d4b\u8bd5\u3002\u901a\u8fc7\u8fd9\u4e2a\u8fc7\u7a0b\uff0c\u8bfb\u8005\u53ef\u4ee5\u5b66\u4e60\u5230\u65e0\u7ebfAP\u8ba4\u8bc1\u7684\u5b9e\u73b0\u6b65\u9aa4\u548c\u76f8\u5173\u5de5\u5177\u7684\u4f7f\u7528\u3002\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/32262.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-23T06:46:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250423064606-68088caece666.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/32262.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/32262.html\",\"name\":\"\u3010\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff08\u4e00\uff09\u3011 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2025-04-23T06:46:08+00:00\",\"dateModified\":\"2025-04-23T06:46:08+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/32262.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/32262.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/32262.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u3010\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff08\u4e00\uff09\u3011\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u3010\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff08\u4e00\uff09\u3011 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/32262.html","og_locale":"zh_CN","og_type":"article","og_title":"\u3010\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff08\u4e00\uff09\u3011 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb3.5k\u6b21\uff0c\u70b9\u8d5e31\u6b21\uff0c\u6536\u85cf44\u6b21\u3002\u672c\u6587\u6863\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u5982\u4f55\u5728Ubuntu 16.04\u4e0a\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff0c\u7528\u4e8e\u4f01\u4e1a\u7ea7\u65e0\u7ebfAP\u7684EAP\u8ba4\u8bc1\u3002\u5185\u5bb9\u5305\u62ec\u73af\u5883\u7ec4\u7f51\u3001Freeradius\u7684\u5b89\u88c5\u4e0e\u914d\u7f6e\u3001eapol_test\u5de5\u5177\u7684\u5b89\u88c5\u3001\u8bc1\u4e66\u7684\u751f\u6210\u4ee5\u53caEAP-MD5\u3001EAP-TLS\u3001EAP-PEAP\u7b49\u4e0d\u540c\u52a0\u5bc6\u65b9\u5f0f\u7684\u6d4b\u8bd5\u3002\u901a\u8fc7\u8fd9\u4e2a\u8fc7\u7a0b\uff0c\u8bfb\u8005\u53ef\u4ee5\u5b66\u4e60\u5230\u65e0\u7ebfAP\u8ba4\u8bc1\u7684\u5b9e\u73b0\u6b65\u9aa4\u548c\u76f8\u5173\u5de5\u5177\u7684\u4f7f\u7528\u3002","og_url":"https:\/\/www.wsisp.com\/helps\/32262.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2025-04-23T06:46:08+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250423064606-68088caece666.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"5 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/32262.html","url":"https:\/\/www.wsisp.com\/helps\/32262.html","name":"\u3010\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff08\u4e00\uff09\u3011 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2025-04-23T06:46:08+00:00","dateModified":"2025-04-23T06:46:08+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/32262.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/32262.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/32262.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u3010\u65e0\u7ebfAP\u4f01\u4e1a\u7ea7\u8ba4\u8bc1\u4e4b\u642d\u5efaFreeRadius\u670d\u52a1\u5668\uff08\u4e00\uff09\u3011"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/32262","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=32262"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/32262\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/32256"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=32262"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=32262"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=32262"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=32262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}