Features/WPA-WPA2-Enterprise-Network-Connections/Testing - Revision history

Nitika: /* Setting up a RADIUS server (on a dedicated machine) */

2013-01-02T21:01:01Z

Setting up a RADIUS server (on a dedicated machine)

← Older revision		Revision as of 17:01, 2 January 2013
Line 12:		Line 12:
	**[[Media:modified_users.doc]]		**[[Media:modified_users.doc]]
	**[[Media:diff_users.doc]]		**[[Media:diff_users.doc]]
	* Start the server, by issuing the following command		*Fedora 17 users, please run the following command, before starting the radius server:
			**sudo mv /etc/raddb/modules/dhcp_sqlippool ~
			* Start the server, by issuing the following command:
	** sudo /usr/sbin/radiusd -X &		** sudo /usr/sbin/radiusd -X &

Ajay Garg: /* Setting up a RADIUS server (on a dedicated machine) */

2013-01-02T20:32:14Z

Setting up a RADIUS server (on a dedicated machine)

← Older revision		Revision as of 16:32, 2 January 2013
Line 1:		Line 1:
	== Setting up a RADIUS server (on a dedicated machine) ==		== Setting up a RADIUS server (on a dedicated machine) ==
	* Install "freeradius" rpm package		* Install "freeradius" rpm package
			** sudo yum install freeradius
	* Stop the server (if running)		* Stop the server (if running)
	** sudo killall radiusd		** sudo killall radiusd
	** sudo yum install freeradius
	* Modify "/etc/raddb/clients.conf", to include the name of the network access-point/router. Sample files are present at		* Modify "/etc/raddb/clients.conf", to include the name of the network access-point/router. Sample files are present at
	**[[Media:original_clients.doc]]		**[[Media:original_clients.doc]]

Ajay Garg: /* Setting up a RADIUS server (on a dedicated machine) */

2013-01-02T20:30:49Z

Setting up a RADIUS server (on a dedicated machine)

← Older revision		Revision as of 16:30, 2 January 2013
Line 1:		Line 1:
	== Setting up a RADIUS server (on a dedicated machine) ==		== Setting up a RADIUS server (on a dedicated machine) ==
	* Install "freeradius" rpm package		* Install "freeradius" rpm package
			* Stop the server (if running)
			** sudo killall radiusd
	** sudo yum install freeradius		** sudo yum install freeradius
	* Modify "/etc/raddb/clients.conf", to include the name of the network access-point/router. Sample files are present at		* Modify "/etc/raddb/clients.conf", to include the name of the network access-point/router. Sample files are present at
Line 12:		Line 14:
	* Start the server, by issuing the following command		* Start the server, by issuing the following command
	** sudo /usr/sbin/radiusd -X &		** sudo /usr/sbin/radiusd -X &







	== Setting up the access-point / router ==		== Setting up the access-point / router ==

Ajay Garg at 14:42, 14 December 2011

2011-12-14T14:42:21Z

← Older revision		Revision as of 10:42, 14 December 2011
Line 60:		Line 60:


	== Connecting a client - ~~PEAP~~-based authentication ==		== Connecting a client - LEAP-based authentication ==
			* Help required !!!!
			* We have not been able to set-up a LEAP-authentication-supported access-point / router.
			* Any CISCO guys !!??






			== Connecting a client - TTLS-based authentication ==
	* Navigate to the "Neighbourhood view" on the XO.		* Navigate to the "Neighbourhood view" on the XO.
	* Click on the network-icon, and enter the parameters, as seen in the following screenshot.		* Click on the network-icon, and enter the parameters, as seen in the following screenshot (thanks to Anish, for showing me this minimal configuration).


			** [[File:TTLS_authentication.png]]

	** [[File:PEAP_authentication.png]]

			* NOTES
			** The above configuration is a minimalistic configuration. However, the parameters-cum-secrets modal-dialog, has been modelled on nm-applet.


Line 73:		Line 86:


	== Connecting a client - ~~TTLS~~-based authentication ==		== Connecting a client - PEAP-based authentication ==
	* Navigate to the "Neighbourhood view" on the XO.		* Navigate to the "Neighbourhood view" on the XO.
	* Click on the network-icon, and enter the parameters, as seen in the following screenshot ~~(thanks to Anish, for showing me this minimal configuration)~~.		* Click on the network-icon, and enter the parameters, as seen in the following screenshot.


	** [[File:~~TTLS_authentication~~.png]]		** [[File:PEAP_authentication.png]]


	* NOTES		* NOTES
	** The above configuration is a minimalistic configuration. However, the parameters-cum-secrets modal-dialog, has been modelled on nm-applet.		** The above configuration is a minimalistic configuration. However, the parameters-cum-secrets modal-dialog, has been modelled on nm-applet.

Ajay Garg at 14:35, 14 December 2011

2011-12-14T14:35:46Z

← Older revision		Revision as of 10:35, 14 December 2011
Line 54:		Line 54:
	** If either of "User Certificate", or "Private Key" is in ".p12" format, both these entries should be EXACTLY equal, since the ".p12" certificate contains both.		** If either of "User Certificate", or "Private Key" is in ".p12" format, both these entries should be EXACTLY equal, since the ".p12" certificate contains both.
	** For entering the "User certificate", "CA certificate" and "Private Key", you will be taken to the "Journal-Chooser". You may use the certificates that were retrieved earlier.		** For entering the "User certificate", "CA certificate" and "Private Key", you will be taken to the "Journal-Chooser". You may use the certificates that were retrieved earlier.






			== Connecting a client - PEAP-based authentication ==
			* Navigate to the "Neighbourhood view" on the XO.
			* Click on the network-icon, and enter the parameters, as seen in the following screenshot.


			** [[File:PEAP_authentication.png]]


Line 63:		Line 75:
	== Connecting a client - TTLS-based authentication ==		== Connecting a client - TTLS-based authentication ==
	* Navigate to the "Neighbourhood view" on the XO.		* Navigate to the "Neighbourhood view" on the XO.
	* Click on the network-icon, and enter the parameters, as seen in the following screenshot (thanks to Anish, for showing me this minimal configuration)		* Click on the network-icon, and enter the parameters, as seen in the following screenshot (thanks to Anish, for showing me this minimal configuration).

Ajay Garg at 14:33, 14 December 2011

2011-12-14T14:33:40Z

← Older revision		Revision as of 10:33, 14 December 2011
Line 12:		Line 12:
	* Start the server, by issuing the following command		* Start the server, by issuing the following command
	** sudo /usr/sbin/radiusd -X &		** sudo /usr/sbin/radiusd -X &






Line 24:		Line 28:

	* Note that, you may only need to enter the "Radius Server IP Address" ("192.168.1.3" in the screenshot). The "Radius Server Port", and "Share Secret" are the default ones (at least for a default setup of freeradius).		* Note that, you may only need to enter the "Radius Server IP Address" ("192.168.1.3" in the screenshot). The "Radius Server Port", and "Share Secret" are the default ones (at least for a default setup of freeradius).






Line 46:		Line 54:
	** If either of "User Certificate", or "Private Key" is in ".p12" format, both these entries should be EXACTLY equal, since the ".p12" certificate contains both.		** If either of "User Certificate", or "Private Key" is in ".p12" format, both these entries should be EXACTLY equal, since the ".p12" certificate contains both.
	** For entering the "User certificate", "CA certificate" and "Private Key", you will be taken to the "Journal-Chooser". You may use the certificates that were retrieved earlier.		** For entering the "User certificate", "CA certificate" and "Private Key", you will be taken to the "Journal-Chooser". You may use the certificates that were retrieved earlier.







	== Connecting a client - TTLS-based authentication ==		== Connecting a client - TTLS-based authentication ==

Ajay Garg at 14:32, 14 December 2011

2011-12-14T14:32:42Z

← Older revision		Revision as of 10:32, 14 December 2011
Line 12:		Line 12:
	* Start the server, by issuing the following command		* Start the server, by issuing the following command
	** sudo /usr/sbin/radiusd -X &		** sudo /usr/sbin/radiusd -X &



	== Setting up the access-point / router ==		== Setting up the access-point / router ==
	* Connect the access-point/router, with the RADIUS server machine, through a ethernet cable.		* Connect the access-point/router, with the RADIUS server machine, through a ethernet cable.
	* Through the RADIUS server machine, open the browser, type in the access-point/router IP address, and configure it for WPA/WPA2-Enterprise authentication. A sample screenshot is presented below		* Through the RADIUS server machine, open the browser, type in the access-point/router IP address, and configure it for WPA/WPA2-Enterprise authentication. A sample screenshot is presented below


	**[[File:router_configuration.png]]		**[[File:router_configuration.png]]


	* Note that, you may only need to enter the "Radius Server IP Address" ("192.168.1.3" in the screenshot). The "Radius Server Port", and "Share Secret" are the default ones (at least for a default setup of freeradius).		* Note that, you may only need to enter the "Radius Server IP Address" ("192.168.1.3" in the screenshot). The "Radius Server Port", and "Share Secret" are the default ones (at least for a default setup of freeradius).



	== Connecting a client - TLS-based authentication ==		== Connecting a client - TLS-based authentication ==
Line 33:		Line 41:

	** [[File:TLS_authentication.png]]		** [[File:TLS_authentication.png]]


			* NOTES
			** If either of "User Certificate", or "Private Key" is in ".p12" format, both these entries should be EXACTLY equal, since the ".p12" certificate contains both.
			** For entering the "User certificate", "CA certificate" and "Private Key", you will be taken to the "Journal-Chooser". You may use the certificates that were retrieved earlier.

	== Connecting a client - TTLS-based authentication ==		== Connecting a client - TTLS-based authentication ==
Line 40:		Line 53:

	** [[File:TTLS_authentication.png]]		** [[File:TTLS_authentication.png]]


			* NOTES
			** The above configuration is a minimalistic configuration. However, the parameters-cum-secrets modal-dialog, has been modelled on nm-applet.

Ajay Garg at 14:26, 14 December 2011

2011-12-14T14:26:02Z

← Older revision		Revision as of 10:26, 14 December 2011
Line 30:		Line 30:
	* Navigate to the "Neighbourhood view" on the XO.		* Navigate to the "Neighbourhood view" on the XO.
	* Click on the network-icon, and enter the parameters, as seen in the following screenshot		* Click on the network-icon, and enter the parameters, as seen in the following screenshot


	** [[File:TLS_authentication.png]]		** [[File:TLS_authentication.png]]

Line 35:		Line 37:
	* Navigate to the "Neighbourhood view" on the XO.		* Navigate to the "Neighbourhood view" on the XO.
	* Click on the network-icon, and enter the parameters, as seen in the following screenshot (thanks to Anish, for showing me this minimal configuration)		* Click on the network-icon, and enter the parameters, as seen in the following screenshot (thanks to Anish, for showing me this minimal configuration)


	** [[File:TTLS_authentication.png]]		** [[File:TTLS_authentication.png]]

Ajay Garg at 14:20, 14 December 2011

2011-12-14T14:20:36Z

← Older revision		Revision as of 10:20, 14 December 2011
Line 19:		Line 19:
	* Note that, you may only need to enter the "Radius Server IP Address" ("192.168.1.3" in the screenshot). The "Radius Server Port", and "Share Secret" are the default ones (at least for a default setup of freeradius).		* Note that, you may only need to enter the "Radius Server IP Address" ("192.168.1.3" in the screenshot). The "Radius Server Port", and "Share Secret" are the default ones (at least for a default setup of freeradius).

	== ~~TESTING~~ - TTLS-based authentication ==		== Connecting a client - TLS-based authentication ==
			* Make sure you have three certificates - user-certificate, ca-certificate, private-key - before you proceed. One way to get these certificates is as follows:
			** Go to the RADIUS server machine, and navigate to "/etc/raddb/certs"
			** Run the following commands
			*** sudo make client.pem
			*** sudo chmod 0644 client.p12
			*** sudo chmod 0644 ca.pem
			*** Transfer "client.p12" and "ca.pem" to a USB drive.
			*** Use this USB drive, in the subsequent steps.
			* Navigate to the "Neighbourhood view" on the XO.
			* Click on the network-icon, and enter the parameters, as seen in the following screenshot
			** [[File:TLS_authentication.png]]

			== Connecting a client - TTLS-based authentication ==
	* Navigate to the "Neighbourhood view" on the XO.		* Navigate to the "Neighbourhood view" on the XO.
	* Click on the network-icon, and enter the parameters, as seen in the following screenshot (thanks to Anish, for showing me this minimal configuration)		* Click on the network-icon, and enter the parameters, as seen in the following screenshot (thanks to Anish, for showing me this minimal configuration)
	** [[File:TTLS_authentication.png]]		** [[File:TTLS_authentication.png]]

Ajay Garg at 14:13, 14 December 2011

2011-12-14T14:13:44Z

← Older revision		Revision as of 10:13, 14 December 2011
Line 21:		Line 21:
	== TESTING - TTLS-based authentication ==		== TESTING - TTLS-based authentication ==
	* Navigate to the "Neighbourhood view" on the XO.		* Navigate to the "Neighbourhood view" on the XO.
	* Click on the network-icon, and enter the parameters, as seen in the following screenshot		* Click on the network-icon, and enter the parameters, as seen in the following screenshot (thanks to Anish, for showing me this minimal configuration)
	** [[File:TTLS_authentication.png]]		** [[File:TTLS_authentication.png]]