Eap-peap/mschapv2

Eap-peap/mschapv2
File path	Use	Example	Note
#gedit/usr/local/etc/raddb/sites-available/default #gedit/usr/local/etc/raddb/sites-enabled/default		  set authorize{}  Files are recessive, SQL is dominant Select Read user preset information from SQL database
#gedit/usr/local/etc/raddb/sites-available/default #gedit/usr/local/etc/raddb/sites-enabled/default	Select the authentication method	Set authorize{} in EAP set to dominant Select the authentication method for EAP
#gedit/usr/local/etc/raddb/eap.conf	Select EAP Type	Set eap{} in Default_eap_type=peap Set EAP type to PEAP
#ls/usr/local/etc/raddb/certs/*.pem	To see if a certificate exists	The normal list contains CA.PEM	If you do not have a Ca.pem file, execute the following command: #/usr/local/etc/raddb/certs/bootstrap
#mysql-U root-p Enter password:456456 mysql> use Freeradius; mysql> INSERT INTO radgroupreply (groupname,attribute,op,value) VALUES (' EAP ', ' Auth-type ', ': = ', ' EAP '); mysql> INSERT INTO radgroupreply (groupname,attribute,op,value) VALUES (' EAP ', ' Service-type ', ': = ', ' Framed-user '); mysql> INSERT INTO radgroupreply (groupname,attribute,op,value) VALUES (' EAP ', ' framed-ip-address ', ': = ', ' 255.255.255.255 '); mysql> insert INTO radgroupreply (groupname,attribute,op,value) VALUES (' EAP ', ' Framed-ip-netmask ', ': = ', ' 255.255.255.0 ');	Set up Group information
mysql> INSERT INTO Radcheck (username,attribute,op,value) VALUES (' EAP ', ' User-password ', ': = ', ' EAP ');	Create User Information
mysql> INSERT INTO Radusergroup (username,groupname) VALUES (' EAP ', ' EAP ');	Associating users with Groups
mysql> INSERT INTO radreply (username,attribute,op,value) VALUES (' EAP ', ' reply-message ', ' = ', ' EAP ok! ');	Add user reply message
#gedit/usr/local/etc/raddb/clients.conf	Add a new proxy host	Add client 10.10.200.0/24 { secret = 111111 shortname = Tessie} on the last side LocalHost's secret defaults to testing123
#~/peap.test	creating a Test profile	  network={//Note: "=" no spaces before and after Eap=peapeapol_flags=0key_mgmt=ieee8021xidentity= "EAP"// Note: This test account was previously built with SQL in the database, so you can use password= "EAP" Ca_cert= "/usr/local/etc/raddb/certs/ca.pem" phase2= "Auth=mschapv2 "Anonymous_identity=" Anonymous "}	 
#radiusd-X #eapol_test-C peap.test-s testing123//peap.test is in the ~/directory, so the command is also under the ~/directory. Need to remain consistent.	Test	eapol_test-c<conf> [-p<as port>] [-s<as secret>] ...

Eap-peap/mschapv2