WPA Enterprise and Captive Portal together

[fnmunhoz]

Hello!

I am a new user of ZeroShell and I am trying to configure the
authetication with WPA Enterprise, but I would like to use Captive
Portal too.

However, the user should be redirected to captive portal only when he
is not authenticated by RADIUS server yet.

There is a way to configure ZeroShell to do this?

Thank you

[imported_fulvio]

You should configure the FreeRadius to send to the Access Points the 802.1q VLAN IDs. Zeroshell automatically performs this operation by using the VLAN tag that you specify in the User web form, but I do not think that it is what you want to do.

Regards
Fulvio

[fnmunhoz]

@fulvio wrote:

You should configure the FreeRadius to send to the Access Points the 802.1q VLAN IDs. Zeroshell automatically performs this operation by using the VLAN tag that you specify in the User web form, but I do not think that it is what you want to do.

Regards
Fulvio

Hello thank you for your reply. I will try make another question!

How can I execute a script in ZeroShell after a sucessfull radius authentitication?

Something like that:

IF { Login OK: [user] (from client sat1 port 0 cli 000ee5ec0767) } THEN {

/bin/bash script.sh $IP $user

}

[imported_fulvio]

Yes, it is possible, but you need to change the radius.conf configuration file. By using only the web interface it is not possible.

Regards
Fulvio

[fnmunhoz]

The file to change is:

/root/kerbynet.cgi/template.cfg/radiusd.conf ?

How can I modify this file permanently using ZeroShell LiveCD?

In /root/kerbynet.cgi/template.cfg/radiusd.conf

there is the section below which run

/root/kerbynet.cgi/scripts/RadiusLog script after a sucessfull radius authentication, that’s it?:

exec RadiusLog {
wait = yes
program = “/RadiusLog”
input_pairs = request
output_pairs = reply
}

Can I put the follow line in RadiusLog to leave the user from Captive Portal?

$SCRIPTS/cp_connect $NAS_IP $USER_NAME

This strategy seems be a good one?

Thank you for all replys!

[Author]

Posts