{"id":500,"date":"2019-06-21T09:11:30","date_gmt":"2019-06-21T15:11:30","guid":{"rendered":"https:\/\/ugit.siua.ac.cr\/?p=500"},"modified":"2021-04-13T11:41:44","modified_gmt":"2021-04-13T17:41:44","slug":"802-1x-con-freeradius-mysql","status":"publish","type":"post","link":"https:\/\/sada.services\/?p=500","title":{"rendered":"FREERADIUS: 802.1x con MYSQL"},"content":{"rendered":"\n<p>En esta gu\u00eda se muestra como instalar freeradius con mariadb para realizar una autenticaci\u00f3n 802.1x en la red inal\u00e1mbrica, utilizando PEAP-MSCHPv2<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Partimos de la instalaci\u00f3n de un contenedor con debian 9, primero actualizamos el sistema y creamos el usuario ugit<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>apt update &amp;&amp; apt upgrade &amp;&amp; apt dist-upgrade -y<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>adduser ugit<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Con el password: CA2<\/li><li>Y lo agregamos al grupo root<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>adduser ugit root<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Se configura la zona horaria<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>dpkg-reconfigure tzdata<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Mariadb<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Instalamos Mariadb<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>apt install mariadb-server -y<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Configuramos Mariadb<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>mysql_secure_installation<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Resultado:<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>OTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB\n      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!\n\nIn order to log into MariaDB to secure it, we'll need the current\npassword for the root user.  If you've just installed MariaDB, and\nyou haven't set the root password yet, the password will be blank,\nso you should just press enter here.\n\nEnter current password for root (enter for none): \nOK, successfully used password, moving on...\n\nSetting the root password ensures that nobody can log into the MariaDB\nroot user without the proper authorisation.\n\nSet root password? &#91;Y\/n] Y\nNew password: HB0\nRe-enter new password: HB0\nPassword updated successfully!\nReloading privilege tables..\n ... Success!\n\n\nBy default, a MariaDB installation has an anonymous user, allowing anyone\nto log into MariaDB without having to have a user account created for\nthem.  This is intended only for testing, and to make the installation\ngo a bit smoother.  You should remove them before moving into a\nproduction environment.\n\nRemove anonymous users? &#91;Y\/n] Y\n ... Success!\n\nNormally, root should only be allowed to connect from 'localhost'.  This\nensures that someone cannot guess at the root password from the network.\n\nDisallow root login remotely? &#91;Y\/n]  Y\n ... Success!\n\nBy default, MariaDB comes with a database named 'test' that anyone can\naccess.  This is also intended only for testing, and should be removed\nbefore moving into a production environment.\n\nRemove test database and access to it? &#91;Y\/n] Y\n - Dropping test database...\n ... Success!\n - Removing privileges on test database...\n ... Success!\n\nReloading the privilege tables will ensure that all changes made so far\nwill take effect immediately.\n\nReload privilege tables now? &#91;Y\/n] Y\n ... Success!\n\nCleaning up...\n\nAll done!  If you've completed all of the above steps, your MariaDB\ninstallation should now be secure.\n\nThanks for using MariaDB!<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">freeradius<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Instalamos freeradius<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>apt-get install freeradius freeradius-mysql freeradius-utils -y<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Reiniciamos freeradius<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>\/etc\/init.d\/freeradius restart<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Resultado:<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91; ok ] Restarting freeradius (via systemctl): freeradius.service.<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">MYSQL<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Para esta configuraci\u00f3n vamos a crear una base de datos local, pero el proceso para una base de datos remota es el mismo.<\/li><li>Ingresamos a la BD como usuario \u00abroot\u00bb<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>mysql -u root -p<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Creamos una base de datos de nombre \u00abradius\u00bb<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>create database radius;<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Creamos un usuario para conectarnos a la BD de manera local y remota<\/li><li>User: remoto<\/li><li>Pass: RB0<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>grant all privileges on radius.* to remoto@localhost identified by 'RB0';<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Recargamos los privilegios de la tablas para que los cambios tengan efecto<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>flush privileges;<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Salimos de Mysql<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>quit<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Ahora vamos a importar el esquema por defecto de radius a la base de datos que creamos en el paso anterior, el esquema se va importar a la ruta&nbsp;<strong>\/etc\/freeradius\/3.0\/mods-config\/sql\/main\/mysql\/schema.sql<\/strong><\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>mysql -u root -p radius &lt; \/etc\/freeradius\/3.0\/mods-config\/sql\/main\/mysql\/schema.sql<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Ahora habilitamos el modulo SQL, creando un enlace simb\u00f3lico del&nbsp;<strong>modulo sql<\/strong>&nbsp;que se encuentra en&nbsp;<strong>\/etc\/freeradius\/3.0\/mods-available\/<\/strong>&nbsp;a&nbsp;<strong>\/etc\/freeradius\/3.0\/mods-enabled<\/strong><\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>ln -s \/etc\/freeradius\/3.0\/mods-available\/sql \/etc\/freeradius\/3.0\/mods-enabled\/<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Ahora abrimos el modulo sql habilitado y configuramos la base de datos radius como se muestra a continuaci\u00f3n, en este caso usaremos la base de datos local <strong>radius<\/strong><\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>nano \/etc\/freeradius\/3.0\/mods-enabled\/sql<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Primero buscamos la linea&nbsp;<strong>driver = \u00abrlm_sql_null\u00bb<\/strong>, y remplazamos por&nbsp;<strong>driver = \u00abrlm_sql_mysql\u00bb<\/strong><\/li><\/ul>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img fetchpriority=\"high\" decoding=\"async\" width=\"678\" height=\"473\" src=\"\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_454-1.png\" alt=\"\" class=\"wp-image-503\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_454-1.png 678w, https:\/\/sada.services\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_454-1-300x209.png 300w\" sizes=\"(max-width: 678px) 100vw, 678px\" \/><\/figure><\/div>\n\n\n\n<ul class=\"wp-block-list\"><li>Buscamos la linea&nbsp;<strong>dialec= \u00absqlite\u00bb<\/strong>&nbsp;para ubicarnos y hacemos los siguientes cambios<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"691\" height=\"478\" src=\"\/wp-content\/uploads\/2019\/10\/Selecci\u00f3n_089-1.png\" alt=\"\" class=\"wp-image-2695\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/10\/Selecci\u00f3n_089-1.png 691w, https:\/\/sada.services\/wp-content\/uploads\/2019\/10\/Selecci\u00f3n_089-1-300x208.png 300w\" sizes=\"(max-width: 691px) 100vw, 691px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Si deseamos cargar los clientes desde la tabla <strong>\u00abnas\u00bb<\/strong> de la base de datos, descomentamos la siguiente l\u00ednea,  la vamos a descomentar para guardar los datos del <strong>NAS (Network Acess Server)<\/strong> en la base de datos MYSQL, <\/li><\/ul>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img decoding=\"async\" width=\"689\" height=\"132\" src=\"\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_456.png\" alt=\"\" class=\"wp-image-505\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_456.png 689w, https:\/\/sada.services\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_456-300x57.png 300w\" sizes=\"(max-width: 689px) 100vw, 689px\" \/><\/figure><\/div>\n\n\n\n<ul class=\"wp-block-list\"><li>Salvamos los cambios&nbsp;<strong>(Ctrl + o, en nano)<\/strong>&nbsp;y salimos del editor<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Reiniciamos el servicio Radius<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>\/etc\/init.d\/freeradius restart<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Creamos un cliente NAS en la base de datos<\/li><li>Ingresamos a la base de datos como root<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>mysql -u root -p<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Seleccionamos la base de datos radius<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>use radius<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Agregamos el cliente NAS<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO nas (nasname,shortname,type,secret,description) \n                      VALUES ('10.20.191.2','wcontroller','cisco','Adrian_ADM_0','Controladora de red inalambrica');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>quit<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Ahora cambiamos el usuario y el grupo due\u00f1o del modulo SQL habilitado (enlace simb\u00f3lico) a freerad como se muestra a continuaci\u00f3n<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>chown -h freerad.freerad \/etc\/freeradius\/3.0\/mods-enabled\/sql<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Luego reiniciamos el servidor, para que cargue los clientes NAS desde la base de datos<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>init 6<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Primera prueba<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Agregamos un cliente de manera local (Esto es solo si los clientes NAS ser\u00e1n le\u00eddos localmente y no desde la BD)<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>nano \/etc\/freeradius\/3.0\/clients.conf<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Agregamos como cliente a la controladora inal\u00e1mbrica<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>client \"controlador\" {\n        ipaddr = 10.20.191.2\n        proto = udp\n        secret = 'Adrian_ADM_0'\n        require_message_authenticator = no\n        nas_type = cisco\n        ### login = !root ###\n        ### password = someadminpass ###\n        limit {\n                max_connections = 16\n                lifetime = 0\n                idle_timeout = 30\n        }\n}<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Agregamos usuarios a la base de datos <strong>radius<\/strong> y les asignamos un grupo<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Primero ingresamos a la base de datos como root<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>mysql -u root -p<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Seleccionamos la base de datos radius<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>use radius<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Vamos a crear los grupos <strong>estudiantes, administrativos y ugit<\/strong>, y vamos a incorporar los usuarios <strong>user1, user2, user3, user4<\/strong>, a los grupos creados<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radusergroup (username,groupname) VALUES ('user1', 'estudiantes');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radusergroup (username,groupname) VALUES ('user2', 'estudiantes');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radusergroup (username,groupname) VALUES ('user3', 'administrativos');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radusergroup (username,groupname) VALUES ('user4', 'ugit');<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Creamos los usuarios y las contrase\u00f1as por el momento en texto plano<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radcheck (username,attribute,op,value) \n                      VALUES ('user1','Cleartext-Password',':=','user1');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radcheck (username,attribute,op,value) \n                      VALUES ('user2','Cleartext-Password',':=','user2');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radcheck (username,attribute,op,value) \n                      VALUES ('user3','Cleartext-Password',':=','user3');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radcheck (username,attribute,op,value) \n                      VALUES ('user4','Cleartext-Password',':=','user4');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>quit<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Reiniciamos el servicio freeradius<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>\/etc\/init.d\/freeradius restart<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>En este punto ya se puede autenticar en la red inlambrica con los usuarios y contrase\u00f1as creadas en la base de datos<\/li><li>user1:user1<\/li><li>user2:user2<\/li><li>user3:user3<\/li><li>user4:user4<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Asignaci\u00f3n de VLAN a los usuarios por grupos<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Ahora vamos a asignar a los usuarios un numero de vlan con base en el grupo al que pertenecen, para ello debemos definir 3 atributos para cada grupo en la base de datos radius<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>Tunnel-Type = 13,                 \nTunnel-Medium-Type = 6,\nTunnel-Private-Group-Id = \"155\"  <\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Tunnel-Type<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Vamos a usar el valor 13=VLAN<\/li><\/ul>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"543\" height=\"258\" src=\"\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_459.png\" alt=\"\" class=\"wp-image-510\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_459.png 543w, https:\/\/sada.services\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_459-300x143.png 300w\" sizes=\"(max-width: 543px) 100vw, 543px\" \/><\/figure><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Tunnel-Medium-Type <\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Vamos a usar el valor 6= IEEE-802<\/li><\/ul>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"547\" height=\"298\" src=\"\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_458.png\" alt=\"\" class=\"wp-image-511\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_458.png 547w, https:\/\/sada.services\/wp-content\/uploads\/2019\/06\/Selecci\u00f3n_458-300x163.png 300w\" sizes=\"(max-width: 547px) 100vw, 547px\" \/><\/figure><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Tunnel-Private-Group-Id<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Aqu\u00ed asignamos la etiqueta de vlan que deseamos para cada grupo, 155 para estudiantes, 168 para administrativos y 190 para ugit.<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>mysql -u root -p<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Seleccionamos la BD radius<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>use radius<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Agregamos los atributos a los grupos<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">Grupo estudiantes<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radgroupreply (groupname, attribute, value, op)\n                           VALUES ('estudiantes', 'Tunnel-Type', '13', ':=');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radgroupreply (groupname, attribute, value, op)\n                           VALUES ('estudiantes', 'Tunnel-Medium-Type', '6', ':=');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radgroupreply (groupname, attribute, value, op)\n                           VALUES ('estudiantes', 'Tunnel-Private-Group-Id', '155', ':=');<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Grupo administrativos<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radgroupreply (groupname, attribute, value, op)\n                           VALUES ('administrativos', 'Tunnel-Type', '13', ':=');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radgroupreply (groupname, attribute, value, op)\n                           VALUES ('administrativos', 'Tunnel-Medium-Type', '6', ':=');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radgroupreply (groupname, attribute, value, op)\n                           VALUES ('administrativos', 'Tunnel-Private-Group-Id', '168', ':=');<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Grupo ugit<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radgroupreply (groupname, attribute, value, op)\n                           VALUES ('ugit', 'Tunnel-Type', '13', ':=');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radgroupreply (groupname, attribute, value, op)\n                           VALUES ('ugit', 'Tunnel-Medium-Type', '6', ':=');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>INSERT INTO radgroupreply (groupname, attribute, value, op)\n                           VALUES ('ugit', 'Tunnel-Private-Group-Id', '190', ':=');<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>quit<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Ahora para que los atributos de los grupos se propagen a la respuesta final del radius Access-Accept a la controladora, debemos modificar el siguiente archivo<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>nano \/etc\/freeradius\/3.0\/sites-available\/inner-tunnel<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Lo descomentamos como se muestra en la siguiente imagen:<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code> #\n        #  Instead of \"use_tunneled_reply\", uncomment the\n        #  next two \"update\" blocks.\n        #\n        update {\n                &amp;outer.session-state: += &amp;reply:\n        }\n\n        #\n        #  These attributes are for the inner session only.\n        #  They MUST NOT be sent in the outer reply.\n        #\n        #  If you uncomment the previous block and leave\n        #  this one commented out, WiFi WILL NOT WORK,\n        #  because the client will get two MS-MPPE-keys\n        #\n        update outer.session-state {\n                MS-MPPE-Encryption-Policy !* ANY\n                MS-MPPE-Encryption-Types !* ANY\n                MS-MPPE-Send-Key !* ANY\n                MS-MPPE-Recv-Key !* ANY\n                Message-Authenticator !* ANY\n                EAP-Message !* ANY\n                Proxy-State !* ANY\n        }<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Ahora la asignaci\u00f3n de VLAN deber\u00eda funcionar.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Podemos verificar donde est\u00e1 escuchando el servidor<\/li><li>Lo reiniciamos por aquello que est\u00e9 detenido el servicio y tambi\u00e9n lo  recargamos.<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>\/etc\/init.d\/freeradius restart<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>\/etc\/init.d\/freeradius reload<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Verificamos<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>ss -alun4 | grep -E '1812|1813'<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Resultado<\/li><\/ul>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"579\" height=\"62\" src=\"\/wp-content\/uploads\/2019\/09\/Selecci\u00f3n_054.png\" alt=\"\" class=\"wp-image-1225\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/09\/Selecci\u00f3n_054.png 579w, https:\/\/sada.services\/wp-content\/uploads\/2019\/09\/Selecci\u00f3n_054-300x32.png 300w\" sizes=\"(max-width: 579px) 100vw, 579px\" \/><\/figure><\/div>\n\n\n\n<ul class=\"wp-block-list\"><li>Para poner el servicio freeradius en modo depuraci\u00f3n<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Detenemos el servicio<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl stop freeradius<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Entramos en modo depuraci\u00f3n<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>freeradius -X<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Crear acceso remoto a la base de datos<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Necesitamos crear el acceso remoto a la Base de datos para poder accesarla desde otro host al freeradius<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Editamos el archivo \/etc\/mysql\/mariadb.conf.d\/50-server.cnf<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>nano \/etc\/mysql\/mariadb.conf.d\/50-server.cnf<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>Cambiamos la linea bind-address = 127.0.0.1 x bind-address = 0.0.0.0<\/code><\/pre>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"462\" height=\"411\" src=\"\/wp-content\/uploads\/2019\/09\/Selecci\u00f3n_057.png\" alt=\"\" class=\"wp-image-1269\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/09\/Selecci\u00f3n_057.png 462w, https:\/\/sada.services\/wp-content\/uploads\/2019\/09\/Selecci\u00f3n_057-300x267.png 300w\" sizes=\"(max-width: 462px) 100vw, 462px\" \/><\/figure><\/div>\n\n\n\n<ul class=\"wp-block-list\"><li>Nos logeamos en mysql<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>mysql -u root -p<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Seleccionamos la base de datos<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>use radius<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Damos permisos a remoto sobre la bd radius<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>GRANT ALL ON *.* TO 'remoto'@'%' IDENTIFIED BY 'Remoto_BAS_0';<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>quit<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Reiniciamos los servicios<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>\/etc\/init.d\/freeradius restart<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>service mysql restart<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Ya nos podemos logear de manera remota a la BD de freeradius, con<\/li><li>Usuario: remoto<\/li><li>Paswd:  Remoto_BAS_0<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Para que el servicio se inicie al arrancar el sistema operativo<\/h2>\n\n\n\n<p>Comprobar si esta o no esta habilitado en el inicio<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl is-enabled freeradius.service<\/code><\/pre>\n\n\n\n<p>Nos indicara si el servicio est\u00e1 enable o disable, si est\u00e1 disabled, lo habilitamos<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl enable freeradius.service<\/code><\/pre>\n\n\n\n<p>Ahora el servicio iniciar\u00e1 al arrancar el sistema operativo<\/p>\n\n\n\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-unidad-de-gestion-e-innovacion-tecnologica\"><div class=\"wp-block-embed__wrapper\">\n\/?p=518\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>FREERADIUS: 802.1x con MYSQL<\/p>\n","protected":false},"author":2,"featured_media":2017,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,4,15],"tags":[25,28,26,27],"class_list":["post-500","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-freeradius","category-mysql","category-wifi","tag-802-1x","tag-aaa","tag-dynamic-vlan","tag-vlan-override"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":6}},"_links":{"self":[{"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/posts\/500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=500"}],"version-history":[{"count":34,"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/posts\/500\/revisions"}],"predecessor-version":[{"id":4624,"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/posts\/500\/revisions\/4624"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/media\/2017"}],"wp:attachment":[{"href":"https:\/\/sada.services\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}