1. apt install freeradius
1.1 /etc/freeradius/3.0/certs# make destroycerts && make all
2. /etc/freeradius/3.0# nano users
vpn Cleartext-Password := "vpn"
Reply-Message := "Hello, %{User-Name}"
3. nano clients.conf
client private-network-2 {
ipaddr = 0.0.0.0/0
secret = 1qaz2wsx
}
4. nano mods-available/eap
eap {
private_key_file = /etc/freeradius/3.0/certs/server.pem
certificate_file = /etc/freeradius/3.0/certs/server.pem
ca_file = /etc/freeradius/3.0/certs/ca.pem
cipher_list = "DEFAULT@SECLEVEL=0"
clpher_list = "DEFAULT"
tls_min_version = "1.0"
tls_max_version = "1.2"
ecdh_curve = "prime256v1"
peap {
use_tunneled_reply = yes
5. debug : freeradius -X
