10. Services (FreeRADIUS)

FreeRADIUS provides centralized authentication for enterprise WiFi (802.1X) and VPN clients. Install "FreeRADIUS" from Package Manager to enable the Services page.

10.1 General

Enable/disable the RADIUS server. Ports are fixed at the RADIUS standard (1812/UDP authentication, 1813/UDP accounting per RFC 2865/2866) and are not currently configurable.

10.2 NAS / Clients

Register each device that will send authentication requests to this server (a WiFi access point or VPN concentrator, for example) with a name, IP/CIDR, and shared secret of at least 8 characters.

10.3 Users

Add username/password pairs for RADIUS-authenticated users.

10.4 Log

Raw and parsed views of authentication attempts, showing timestamp, username, and accept/reject result for each login.