AZTCOFW / DOCUMENTATION
Authenticating OpenVPN Users with FreeRADIUS
Configuration guides, troubleshooting and practical advice for AZTCOFW.
Articles
9 resultsAdd a NAS client to FreeRADIUS
Navigate to Services > FreeRADIUS Select the NAS / Clients tab Click + to add a new entry Enter 127.0.0.1 in the Client IP Address field Enter AZATCO-FW, OpenVPN, or similar in the Client Shortname field Enter a random/l
Add an interface to FreeRADIUS
Navigate to Services > FreeRADIUS Select the Interfaces tab Click + to add a new entry Enter * for the Interface IP Address, or 127.0.0.1 to bind only to Localhost Enter 1812 for the Port Select Authentication for the In
Add Users
Navigate to Services > FreeRADIUSSelect the Users tab. This is where every user to authenticate with FreeRadius/OpenVPN is managed Click + to add a new entry Enter a Username and Password Enter any additional desired opt
Configure a AZATCO-FW Authentication Server
In the AZATCO-FW webGUI, navigate to System > User Manager Select the Servers tab Click + to add a new entry Enter a Descriptive name such as FreeRADIUS Select RADIUS for the Type Enter 127.0.0.1 for the Hostname or IP a
Configure OpenVPN to use RADIUS
Navigate to VPN > OpenVPN Select the Servers tab Edit the existing Remote Access server Ensure that the Mode is either Remote Access (User Auth) or Remote Access (SSL/TLS + User Auth) Select FreeRADIUS or the Descriptive
Purpose
This document demonstrates how to setup OpenVPN while allowing for authentication via RADIUS. Usernames and Passwords can be managed centrally on the firewall, and additional RADIUS-specific options may be used. This is
Requirements
A working OpenVPN server. See OpenVPN Remote Access Configuration Example FreeRADIUS Installed.
Test RADIUS Authentication
Navigate to Diagnostics > Authentication Select the authentication server entered above Fill in a Username and Password configured in FreeRADIUS Click Test If the test succeeded, continue. Otherwise, see the Troubleshoot
Troubleshooting
Sometimes things don’t work as expected. The following options can be helpful in troubleshooting FreeRADIUS and OpenVPN. Commands must be run at a shell prompt either via the console or via SSH unless otherwise specified