Radius setup help for wifi

[mcolbourn]

I have tried in the past a few times to setup radius and failed. Not really sure why each time and now think I am cursed and will never get it setup (it has become now a subject that I see as I can't do it so it wont get done type thing). We will be auth via AD (so NPS would be the start I guess unless there are better options) and with have unifi AP's and a WatchGuard Firewall. Are their are any good guides to us that people can point me too please? as I have tied a few in the past and just failed.

[dmj]

This is the generic config that a lot of Universities use.

 

https://docs.google.com/document/d/14LnsBznOw0w2fR7xgBJhzyWp1OztlKO6D5fws0XpjBI/edit

 

I setup similar at a school I was at but it was a bit more homegrown. What errors are you seeing? Can you post your smb.conf and freeradius files?

[mcolbourn]

HI

 

thanks for the reply

 

The last time I tried was over the summer holidays 2022 so I can't really remember what the issues were now just that it didn't work again. I will take a look at the document on FreeRADIUS thanks do you think its better to go down that rote tan NPS on a Windows Server?

The reason for doing this now is that we are going down the 1:1 device route so need to manage our Wi-Fi and vlans much better than we are currently.

[steveg]

Can't be much help as it was a while ago I set our up, but we use NPS. Only thing I remember is that you have to set each wireless point as a client, not the controller as you may in other managed wireless systems.

[Davit2005]

Unless you have Linux skills I'd go with Windows NPS. I've had Unifi APs use NPS for radius before now at home many years back but since moved away from using AD at home and not bothered to setup 802.1x wifi again.

[mavhc]

Auto add radius clients to Windows NPS server, put your APs in a range, add that entire range. Just writes out the commands for now so you can copy and paste. Also need a script to delete them

 

# add radius clients
param (
   [Parameter(Mandatory=$true)][string]$SharedSecret,
   [Parameter(Mandatory=$true)][string]$Class,
   [Parameter(Mandatory=$true)][int]$FirstIP,
   [Parameter(Mandatory=$true)][int]$LastIP
   )

for ($ip = $FirstIP; $ip -le $LastIP; $ip++) {
$address = $class+'.'+$ip
write-output "New-NpsRadiusClient -Address $address -Name $address -SharedSecret $SharedSecret"
}

[dmj]

HI

 

The last time I tried was over the summer holidays 2022 so I can't really remember what the issues were now just that it didn't work again. I will take a look at the document on FreeRADIUS thanks do you think its better to go down that rote tan NPS on a Windows Server?

 

Freeradius/Samba has been around for a loooong time and there's lots of info around because it's used a lot. it's also likely the stack used on embedded devices.

I personally didn't find it too hard (freeradius user forums are useful) and I only run windows where we need to run windows applications.