Freeradius by default uses ports 1812 and 1813, udp traffic. To allow through firewalld run the following commands and restart the service.
sudo firewall-cmd --port-add=1812/udp --permanent
sudo firewall-cmd --port-add=1812/udp --permanent
sudo systemctl restart firewalld
Start Radius Server
systemctl start radiusd
Stop Radius Server
systemctl stop radiusd
Start Radius Server in dubug mode
radiusd -X
Error Log
tail -f /var/log/radius/radius.log
First you’ll need a group that all your disabled clients are going to.
Next add the following lines to the user file “/etc/raddb/users”. Change SQL-Group to Group if your groups are not in a SQL database.
DEFAULT SQL-Group == "disabled", Auth-Type := Reject Reply-Message = "Your account has been disabled."
Save, exit and test.
This should keep all clients in the disabled group from authorizing.
Install Mysql
yum install mariadb mariadb-client mariadb-server freeradius-mysql
Setup MySQL database.
mysql -u root -p CREATE DATABASE radius; GRANT ALL ON radius.* TO radius@localhost IDENTIFIED BY "RadiusPassword"; exit
Import the schema.sql file into the db.
mysql -u radius -p radius < /etc/raddb/mods-config/sql/main/mysql/schema.sql
Should be good to go.