T, CRMERN Rached, Freeads, treradus-dlupadmin, and MySQL on
Log in / create account
Bl
Main Page
Community portal
Current events
Recent changes
Random page
Help
Donations
How to configure DD-WRT, Chillispot, Apache2,
FreeRadius, freeradius-dialupadmin, and MySQL
on Debian 4.0
From DD-WRT Wiki
How to configure DD-WRT, Chillispot, Apache2,
FreeRadius, freeradius-dialupadmin, and MySQL
on Debian 4.0
i-wt.co... How, to_conigue_PD-WRT,_Chilspot_Apache2, FreeRadus, treeradus-dalupad
This will show how to configure the above apps in order to create a hotspot. Also, Iwill go over some attributes to control
bandwidth. Lam not an expert with any of these apps, but I got it working. If anyone has any suggestion, please do not
hesitate on commenting.
Requirements (most of these are in Debian's Synaptic Package Manager)
= Apache?
= MySQL Server
= PHP4
= freeradius
= freeradius-dialupadmin T, CRMs HaD Mpache2, Froekadis,
* php4-mysql
adi-datypadmin, and My SOL on.
= openssl
= ffeeradius-mysql
= php4-cgi
* Download chilispot-1.1.0 (do not install)
= Download MySQL Quick Admin
* Configuring DD-WRT. I am using firmware v24 RC4
1. Make sure your wireless router has Internet access.
2. Open your Intemet browser to “hitp/192.168.1.1”
3. Click “Administration” and make sure you change your router’s username and password.
4, Click on “Setup”, under “Basic Setup”, In the DHCP setting, deselect “DHCP- Authoritative”. Click the
“Apply Settings” button at the bottom,
Network Address Server Settings (DHCP)
DHCP Type
DHCP Server
Start IP Address
Maximum DHCP Users
Client Lease Time
DHCP Server
© Enable © disable
192.168.1.
50
1440 minutes
wins: of of of o
Use DNSMasq for DHCP iw
Use DNSMasq for DNS iw
r
5. Click “Wireless” and in the “Wireless Network Name (SSID)" textbox type the name of the hotspot. For
this how to, we will use the fancy name “HotSpot”. Click the “Apply Settings” button at the bottom.
6. Click “Services” and then “Hotspot”
7. Enable Chillispot. Insert these settings: (On my Debian machine, I asigned a stati ip address of 192.168.1.2)Primary Radius
Server IP/DNS: 192.168.1.2 T, CRMERN Rached, Freeads, treradus-dlupadmin, and MySQL on
= Primary Radius Server IP/DNS: 192.168.1.2
= Backup Radius Server IP/DNS: 192.168.1.2
= DNS IP: “this is your ISP DNS server”
= Remote Network: “use the default”
= Redirect URL: “https//192,168. 1.2/egt binvhotspotlogin.cgi/ ”
= Shared Key: testing] 23
= DHCP Interface: WLAN
= Radius NAS ID: ID_HotSpot
= UAM Secret: testing!23
an
pot
Chillispot © Enable © Disable
Separate Wifi from the LAN Bridge @ Enable Disable
Primary Radius Server IP/ONS [192,168.12
Backup Radius Server IP/ONS [192,168.12
DNS IP fia.123.123.123
Remote Network
Redirect URL
Shared Key
DHCP Interface
fis2.168.182.0/24
fnttps:7/192.168.1.2/cgi-bin/he
resting] 23
[wan =]
Radius NAS ID
[D-Hotspot
8. leave the rest at their default s
9. Click “Apply Settings” and rel
Switch over to the machine with Debian (192.168.1.2). Make sure you have install all packages required.
+ Configuring freeradius
I ike to use Nautilus to navigate as root, To do this, open a “Root Terminal’. Type the following: nautilus --no-
= Line 17: comment out “RedirectMatch */$ /apache2-default””
+**Right before , type
= SSLEngine on
<-w. co... How. o_configue_DD-WRT._Chilspat_Apache2, FreeRadus.treeradus-dalupadm: a8 = SSLCertificateFile /ete/apache2/ssVhotspot hechtburdeshaw.com.ert
= SSLCertificateK eyFile /etc/apache2/ssl/hotspot.hechtburdeshaw.com.key
Save and close the file. Restart apache2 in “Root Terminal”
= apache? -k restart
‘Open an Internet browser and in the address bar type:
= “https:/localhost/”
*Y our Intemet browser should ask you to accept the certificate that was created.
Install and configure “hotspotlogin.cgi”
. Download and extract http?//www. chillspot. info/download. html
Don't install chilispot, Navigate to “/home/username/Desktop/chillispot-1.1.0/doe” with Nautihus
Copy “hotspotlogin.cgi” to “usrfib/eg+bin”
Edit “hotspotlogin.cgi”
= Line 27: uncomment “Suamsecret”
= insert your secret (testing!23)
Using Nautilus, navigate to “Yete/freeradius” and edit “clients.conf”
= Line 27: change “elient 127.0.0.1” to “client 192.168.1.1”
*** this should be the ip address of your DD-WRT
Save and close the file. Now restart freeradius, Open “Root Terminal” and type:
= etclinit.d/freeradius restart
Grab a laptop and tum it on, Check to see if you got the right jp address (should be something like,
192.168.182.X)
-ertificate should
ford. Enter the
Open an Internet browser. The page should be redirected and a pop-up about accepting a
come up. Accept it and you should see the “hotspotlogin.cgi” asking for a username and p:
sq] test user (testsql passwordsql). You should now be logged in and able to surf the web.
+**Ifyou get a blank screen, check your permissions on “hotspotlogin.cgi” file. Other should have “execute”
checked. T, CRMERN Rached, Freeads, treradus-dlupadmin, and MySQL on
+ Configure freeradius-dialupadmin
1. Create a folder and a link. Open a “Root Terminal” and type:
= cd Warkwww
= mkdir diatup
= In-s /usr/share/freeradius-dialupadmivhtdocs /var/www/diatup
2. There is no usemame/password for freeradius-dialupadmin, so we will create one. With Nautilus, navigate to
“Yetc/apache2” and edit “httpd.conf”. Add the following:
= DocumentRoot ‘varhwww/dialup
+
= AuthName "Restricted Area"
= AuthType Basie
= AuthUserFile /var/www/ htaccess
= require valid-user
=
=
= Options Indexes FollowSymLinks MultiViews
= AllowOverride None
= Order allow,deny
= allow fromall
=
3. Create .htacces file for the directory. Open a “Root Terminal” and type:
= htpasswd -cm /varhwww/ htaccess diahup-user
<-w. co... How. o_configue_DD-WRT._Chilspat_Apache2, FreeRadus.treeradus-dalupadm: f Ctvepap Meche, FreeRadu,feeads-dtupamin, and MySAL on ©
+** After you hit enter, it will sk for the new password (dialup-password). Restart apache2 with
“Root Terminal”
= apache? -k restart
4, Test it out by open an intemet browser and going to “hitp:/localhost/htdocs ”
5. When it ask for the usemame/password, enter the ones you created for diahupadmin (dialyp-user/dialup-
password).
6. Edit /usr/share/freeradius-dailupadmin/confladmin.conf
= Line 123: replace “XXXXXX” with your radius secret (testing! 23).
= Line 128: replace “erypt:” with “clear”
= Line 221: replace “dialup_admin” with “user_radius”
= Line 222: replace “XXXXXX” with “user_radius_password”
= Line 223: replace “radius” with “db_radius”
= Line 250: replace “true” with “false” (change back to true if'you want to debug)
***You can start using this setup from here on, by using fieeradius-dialupadmin to add users and groups.
The next part I will show how to insert attributes in order to control bandwidth.
= Configuring attributes to control users bandwidth
1. Adding more sq] tables to db_radius. Using Nautilus, navigate to ‘Yusr/share/ffeeradius-dialupadmin’sq!”.
Edit userinfo sql and badusers.sql.
= Line 5 of both files remove “DEFAULT '0' “
***Save and close.
2. Import the tables to db_radius. Type the following on a “Root Terminal”
= cd /usr/share/ffeeradins-diakpadmin/sql
= mysql-u user_radius -p db_radius < badusers.sql
= mysql-u user_radius -p db_radius
On the left, click “New Group”
For the “Group name” use “Defiaut” and then click the “Create” button
Ifyou click on the “Show Groups” on the left you should see the “Default” group
Click “New Group” on the left again,
Call this new group “Full Bandwidth”
4, Adding attributes
Open your Internet browser to hitpz/localhosvimga
Enter username and password
When it shows the datab
ign to user_radius,
Click “tadgroupcheck” and then click “Insert”, Under “Values” column insert the following:
= id:1
GroupName: Default
Attribute: Auth-Type
= op:==
Value: Local
<-w. co... How. o_configue_DD-WRT._Chilspat_Apache2, FreeRadus.treeradus-dalupadm: 18 T, CRMs HaD Mpache2, Froekadis,
lick the “Insert” button. Now let's enter the next group “Full Bandwidth”
adi-datypadmin, and My SOL on.
= id:
GroupName: Full Bandwith
Attribute: Auth-Type
= op:
= Value: Local
© Click the “Insert” button.
= On the lef, click “radgroupreply” and then click “Insert”. Under “Values” column insert the following:
= ids]
GroupName: Default
Altribute: Session-Timeout
= op:=
Value: 3600
= Click the “Insert” button and enter the next attribute
= id:2
GroupName: Default
Attribute: Idke-Timeout
= op:=
Value: 600
= Click the “Insert” button and enter the next attribute
= id:3
GroupName: Default
Attribute: Acct-Interim: Interval
= op:=
Value: 60
<-w. co... How. o_configue_DD-WRT._Chilspat_Apache2, FreeRadus.treeradus-dalupadm: T, CRMs HaD Mpache2, Froekadis,
lick the “Insert” button and enter the next attribute
adi-datypadmin, and My SOL on.
= ids4
GroupName: Default
Attribute: WISPr-Redirection- UI
= op:=
Vahue: http://www. google.com
Click the “Insert” button and enter the next attribute
= id: 5
= GroupName: Default
Attribute: WISPr-Bandwidth- Max-Up
= op:=
Value: 128000
= Click the “Insert” button and enter the next attribute
= id:6
GroupName: Default
Attribute: WISPr-Bandwidth-Max-Down
= op:
Value: 256000
= Click the “Insert” button, Now k's enter some attributes for “Full Bandwidth”:
= ids7
GroupName: Full Bandwidth
Altribute: S.
n-Timeout,
= op:=
Value: 3600
‘k the “Insert” button and enter the next attribute
<-w. co... How. o_configue_DD-WRT._Chilspat_Apache2, FreeRadus.treeradus-dalupadm: id: 8
GroupName: Full Bandwidth
Attribute: Idle-Timeout
= op:=
Value: 600
Click the “Insert” button and enter the next attribute
= id:9
= GroupName: Full Bandwidth
Attribute: Acct-Interim: Interval
= op:=
Value: 60
Click the “Insert” button and enter the next attribute
id: 10
GroupName: Full Bandwidth
Attribute: WISPr-Reditection-URL
= op:=
Value: htip2www google.com!
Click the “Insert” button, Ifyou click the “Browse” link, you will see all your entries.
= Testing your hotspot.
On mga, click “radcheck” on the left. Then click “Browse” and delete the “testsqI” you created
earlier
Open your Internet browser to “http2/localhosvhidoes ”
On the left of dialupadmin, click “New User”. Enter information and select the group you want the
user to be in, Enter a user for both groups.
Grab a laptop and comnect hotspot. When you asked for a usemname/password, enter the one that T, CRMERN Rached, Freeads, treradus-dlupadmin, and MySQL on
you just created.
Go to http//www.speedtest.net’, You should the difference between both users.
Bonus: How to enable WDS with your new
chillispot
Let's take our newly ereated hotspot and extend the range by enabling WDS (Wireless Distribution Service). Here
is the scenario: the newly created hotspot will be called main. Ako we will use two other wireless router with DD-
WRT installed as clients called client2 and client3
= Configure Main
1, Open Internet browser to 192.168.1.1. Lam using the freeradius server 192.168.1.2
2. Click “Setup” and scroll down to “Router IP” address and change the subnet mask to 255.255.255.248.
Click “Apply Settings”. This wil limit the amount of IP addresses to 192.168.1.1-192.168.1.6
3. Scroll down to “Network Address Server Settings (DHCP)” and disable DHCP Server. Click “Apply
Settings”
4. Click the “Wireless” tab and write down your SSID name. Then click “WDS” and write down the “Wireless
MAC” (11:11:11: 1:11)
= Configure Client2
1.
Nn
6.
Use a desktop or laptop and connect directly to Client2 with a CATS.
Change your TCP/IP for the laptop to 192.168.1.5
Open your Internet browser and enter in the URL: 192.168.1.1
Change the username/password under “Administration”
Click “Setup” and change the “Router Name” to “Client”. Click “Apply Settings”
Scroll down to “Router IP” and change to:
= Local IP Address 192.168.1.3
= Subnet Mask 255.255.255.248
<-w. co... How. o_configue_DD-WRT._Chilspat_Apache2, FreeRadus.treeradus-dalupadm: s8 T, CRMs HaD Mpache2, Froekadis,
12
13
14,
adi-datypadmin, and My SOL on.
= Gateway 192.168.1.1
= Local DNS 192.168.1.1
‘k “Apply Settings”
When the IP address changes, you will have to enter in your URL the new address (192.168.1.3)
Sroll down to “Network Address Server Settings (DHCP)” and disable DHCP Server. Click “Apply
Settings”
Click “Wireless” tab and change the “SSID” to match the Main router's SSID
Click “WD!
ind write down the “Wireless MAC” ( 22:22:22:22:22:22),
In the first entry, select “LAN” and then enter the Main's “Wireless MAC” (11:1 1:11:1 1:11:11). Enter
‘Main’ for the description. Click “Apply Settings”.
Click “Security” tab and disable the firewall. Click “Apply Settings”.
Click “Services” tab and then click “Hotspot”
Enable “Chillispot” with the same configuration as the Main router
Chillispot
Chillispot © Enable © Disable
Separate Wifi from the LAN Bridge @ Enable Disable
Primary Radlus Server iyows fis2368.22
Backup Radius Server pons fis2a6e.22
bus i fiasizaizsiz3—
emote Network fea iee-182 0724
pedirect URL Fraps mez 168 27cgrbinhe
shared Key festngizs
DHCP Interface [wan =]
padius NAS 10 [oHotspot
6. Click “Apply Settings” and reboot Client2 (under “Administration” tab).
= Configure Client3
1. Just follow the instructions for configuring Client2 with these changes:
2. “Router Name” is Client3
3. “Router IP” is 192.168,1.4
<-w. co... How. o_configue_DD-WRT._Chilspat_Apache2, FreeRadus.treeradus-dalupadm: sae T, CRMERN Rached, Freeads, treradus-dlupadmin, and MySQL on
4. Write down the “Wireless MAC” under “Wireless” then “WDS” (33:33:33:33:33:33)
* Finish configuring Main
1. Open your Intemet browser to 192.168.1.1
2. Click the “Wireless” tab and then click “WDS”
3. You will have two entries, Select “LAN” for both entries and enter the “Wireless MAC” of
Client2 (22:22:22:22:22:22) and Client3 (33 ).
4, Click “Apply Settings”
= Configure your freeradius server (192.168.1.2)
1, Goto your freeradius server 192,168.1.2
2. Opena “Root Terminal”, Type the following: nautilus --no-desktop browser.
3. Navigate to /ete/freeradius and edit clients.conf
4, Online 79, enter the following
client 192.168.1.3 {
secret = testing!23
shortname ~ ID-Hotspot
nastype = other
}
client 192.168.1.4
secret = testing!23
shortname = ID-Hotspot
nastype = other
}
5. Save and close, Exit out of Nautilus.
<-w. co... How. o_configue_DD-WRT._Chilspat_Apache2, FreeRadus.treeradus-dalupadm: 6. On ‘Root Terminal’, type:
/etc/init.d/freeradius restart
This should do it. Go around and plug in Client2 and Client3. Make sure they are with in range of the
Main. Go back to your freeradius server and ping each address (192.168.1.3 and 192.168.1.4), you
should get a reply.
Retrieved from "http:/www.dd-wrt.co.in'wiki/index.php/How_to_configure_DD-
WRI%2C_Chillispot%2C_Apache2%2C_FreeRadius%2C_freeradius-
diatupadmin?2C_and_MySQL_on_Debian_4.0"
Category: Developer resources
= Article |
= Discussion |
= Edit|
= History
= What links here |
= Related changes |
= Upload file |
= Special pages
= | Permanent link
= Print as PDF
This page was last modified 18:34, 11 January 2011. This page has been accessed 45,453 times.
= About DD-WRT Wiki|
= Disclaimers |
= Powered by MediaWiki |
= Design by Paul Gu