Integrated Server
SUPPLY, DELIVERY, INSTALLATION, COMMISSIONING AND TESTING FOR NEW RADIUS
ACCOUTING SERVER
Prepared by
Febru Wasono
(febru@soluvas.com)
STEP 1 [SUPLY / THEORY]

Global Concept

Server Requirements

Basic-Networking

VPN

P2P Connections

File-Server

Routing

Traffic limitations
Hardware Requirement
Hardware Specification
CPU Intel Core 2 Duo Pentium processor
Memory 2GB DDR2 server RAM
Hard Drive 360GB SATA Hard Disk
Network Interface Dual Gigabit network interfaces
Power Supply Redundant power supply
Software Requirement
Application Specification
Operating System Linux Ubuntu 8.04 (Hardy Heron)
Radius Server Version 2.0
MySQL Version 5
Dolaradius Version 0.8.9
Samba Version 5
proFTP/TFTP
Standard Configuration
Index Description Value
1 Hostname Sma-server.com
IP / Subnet 10.10.0.1 / 255.255.255.0
Gateway 10.10.0.1
Workgroup Workgroup
Administrator User Role
Username Password
root “root”
2 Hostname vpn.sma-server.com
IP / Subnet 10.10.0.2 / 255.255.255.0
Gateway 10.10.0.1
Workgroup Workgroup
3 Hostname aaa.sma-server.com
IP / Subnet 10.10.0.3 / 255.255.255.0
Gateway 10.10.0.3 / 255.255.255.0
Workgroup Workgroup
Administrator User Role
Password
testing123”
Auth Port 1812
Acct Port 1813
4 Hostname file.sma-server.com
IP / Subnet 10.10.0.4 / 255.255.255.0
Gateway 10.10.0.1
Workgroup Workgroup
5 Hostname dbs.sma-server.com
IP / Subnet 10.10.0.5 / 255.255.255.0
Gateway 10.10.0.1
Workgroup Workgroup
Administrator User Role
Username Password
root/“root” radius/”radius”
6 Hostname dhcp.sma-server.com
IP / Subnet 10.10.0.6 / 255.255.255.0
Gateway 10.10.0.1
Workgroup Workgroup
7 Hostname cache.sma-server.com
IP / Subnet 10.10.0.7 / 255.255.255.0
Gateway 10.10.0.1
Workgroup Workgroup
Port Bind 3128
8 Hostname dans.sma-server.com
IP / Subnet 10.10.0.8 / 255.255.255.0
Gateway 10.10.0.1
Workgroup Workgroup
Port Bind 8080
Basic-Networking
VPN

VPN is Virtual Private Network, a tunnel
link to make a private community.

Securing interconnection.
− Encryption support
− PPTP/IpSEC support

Custom-routing
Create New VPN Connections
Connection is ready
Samba

File Server on *nix system

Multi session support

Privileges.

Quota and User-based privileges system.
Accessing File via samba
Accessing File on Linux
Samba Administration [change
password]
Radius

Radius is AAA server for general purposes
− Authentication : [user + password]
− Authorization : [Routing]
− Accounting : [time-based or package-
based]

FreeRadius, Daloradius, openRadius, etc
Inserting data for new users
insert into `radcheck` (`username`,`attribute`,`op`,`value`) values ("S_6886","User­
Password","==","XXXX"); insert into `radusergroup` (`username`,`groupname`,`priority`) 
values ("S_6886","siswa","2"); insert into `userinfo` 
(`username`,`firstname`,`lastname`) values ("S_6886","XII IPA 3","ACHMAD ZUNAIFAN 
LAHUDDIN"); insert into `radcheck` (`username`,`attribute`,`op`,`value`) values 
("S_6886","Expiration",":=","24 Jul 2010");
Generate Batch-User
Changing Password
Checking time-usage
Checking user-billing
Checking user online
Php myadmin

Administration for all user on mySQL
database server.

User Friendly UI
Add-user traffic limitations
Checking user online
Add administrator for Radius
Dans Guardian [porn protection]
vim 
/etc/dansguardian/lists/bannedre
gexpurllist  
vim 
/etc/dansguardian/lists/exceptio
nurllist 
vim 
/etc/dansguardian/lists/bannedur
llist
STEP 2 : [Delivery]

Server : Ubuntu

Radius : FreeRadius + Daloradius

P2P : PPTP Server

Phpmyadmin

Dansguardian

Routing : Iptables
Step 3 : [installation]
Step 4 : Commissioning and
Testing
Step 5 : [administrating and
maintenance]

Integrated server

  • 1.
    Integrated Server SUPPLY, DELIVERY,INSTALLATION, COMMISSIONING AND TESTING FOR NEW RADIUS ACCOUTING SERVER Prepared by Febru Wasono (febru@soluvas.com)
  • 2.
    STEP 1 [SUPLY/ THEORY]  Global Concept  Server Requirements  Basic-Networking  VPN  P2P Connections  File-Server  Routing  Traffic limitations
  • 4.
    Hardware Requirement Hardware Specification CPUIntel Core 2 Duo Pentium processor Memory 2GB DDR2 server RAM Hard Drive 360GB SATA Hard Disk Network Interface Dual Gigabit network interfaces Power Supply Redundant power supply
  • 5.
    Software Requirement Application Specification OperatingSystem Linux Ubuntu 8.04 (Hardy Heron) Radius Server Version 2.0 MySQL Version 5 Dolaradius Version 0.8.9 Samba Version 5 proFTP/TFTP
  • 6.
    Standard Configuration Index DescriptionValue 1 Hostname Sma-server.com IP / Subnet 10.10.0.1 / 255.255.255.0 Gateway 10.10.0.1 Workgroup Workgroup Administrator User Role Username Password root “root”
  • 7.
    2 Hostname vpn.sma-server.com IP/ Subnet 10.10.0.2 / 255.255.255.0 Gateway 10.10.0.1 Workgroup Workgroup 3 Hostname aaa.sma-server.com IP / Subnet 10.10.0.3 / 255.255.255.0 Gateway 10.10.0.3 / 255.255.255.0 Workgroup Workgroup Administrator User Role Password testing123” Auth Port 1812 Acct Port 1813
  • 8.
    4 Hostname file.sma-server.com IP/ Subnet 10.10.0.4 / 255.255.255.0 Gateway 10.10.0.1 Workgroup Workgroup 5 Hostname dbs.sma-server.com IP / Subnet 10.10.0.5 / 255.255.255.0 Gateway 10.10.0.1 Workgroup Workgroup Administrator User Role Username Password root/“root” radius/”radius”
  • 9.
    6 Hostname dhcp.sma-server.com IP/ Subnet 10.10.0.6 / 255.255.255.0 Gateway 10.10.0.1 Workgroup Workgroup 7 Hostname cache.sma-server.com IP / Subnet 10.10.0.7 / 255.255.255.0 Gateway 10.10.0.1 Workgroup Workgroup Port Bind 3128 8 Hostname dans.sma-server.com IP / Subnet 10.10.0.8 / 255.255.255.0 Gateway 10.10.0.1 Workgroup Workgroup Port Bind 8080
  • 10.
  • 12.
    VPN  VPN is VirtualPrivate Network, a tunnel link to make a private community.  Securing interconnection. − Encryption support − PPTP/IpSEC support  Custom-routing
  • 13.
    Create New VPNConnections
  • 22.
  • 23.
    Samba  File Server on*nix system  Multi session support  Privileges.  Quota and User-based privileges system.
  • 24.
  • 25.
  • 26.
  • 27.
    Radius  Radius is AAAserver for general purposes − Authentication : [user + password] − Authorization : [Routing] − Accounting : [time-based or package- based]  FreeRadius, Daloradius, openRadius, etc
  • 28.
    Inserting data fornew users insert into `radcheck` (`username`,`attribute`,`op`,`value`) values ("S_6886","User­ Password","==","XXXX"); insert into `radusergroup` (`username`,`groupname`,`priority`)  values ("S_6886","siswa","2"); insert into `userinfo`  (`username`,`firstname`,`lastname`) values ("S_6886","XII IPA 3","ACHMAD ZUNAIFAN  LAHUDDIN"); insert into `radcheck` (`username`,`attribute`,`op`,`value`) values  ("S_6886","Expiration",":=","24 Jul 2010");
  • 29.
  • 30.
  • 31.
  • 32.
  • 33.
  • 34.
    Php myadmin  Administration forall user on mySQL database server.  User Friendly UI
  • 35.
  • 36.
  • 37.
  • 38.
    Dans Guardian [pornprotection] vim  /etc/dansguardian/lists/bannedre gexpurllist   vim  /etc/dansguardian/lists/exceptio nurllist  vim  /etc/dansguardian/lists/bannedur llist
  • 39.
    STEP 2 :[Delivery]  Server : Ubuntu  Radius : FreeRadius + Daloradius  P2P : PPTP Server  Phpmyadmin  Dansguardian  Routing : Iptables
  • 40.
    Step 3 :[installation]
  • 41.
    Step 4 :Commissioning and Testing
  • 42.
    Step 5 :[administrating and maintenance]