SlideShare a Scribd company logo
DICKSON ALORWORNU
New York Institute of Technology
Spring 2015
Wireless Security
lUsing Fine-Grained Authentication for Your
Wireless Network(per user auth for 802.11) by
setting up a RADIUS server featuring FreeRadius
Using Fine-Grained Authentication
Deploy a Radius Server
http://www.freeradius.org/getting.html
1. Upack and change into directory
2. Build by running './configure && make'
3. Authenticate as root and run 'make install'
Create a User
lYou'll need to create a user to run under like
_dixon
lEdit FreeRadius's config file → radiusd.conf
lIf you did not specify an alternate installation
prefix when running configure, it should be in
/usr/local/etc/raddb
Config
lSearch for user = nobody to find a good location
lUser = _dixon
lGroup = _dixon
lEdit eap.conf in same directory to locate following
line in eap section:
ldefault_eap_type = md5 -> default_eap_type =
peap
Config
lUncomment the following lines:
ldh_file = ${raddbdir}/certs/dh
lrandom_file = ${raddbdir}/certs/random
lUncomment the peap section and the following
line
l # default_eap_type = mschapv2
Config_Auth
lTo allow the authenticator to access it, edit the
clients.conf file and add the following entry (set in
your env)
lclient 10.10.10.100 {
labc123 = authpass
lhServ1 = openwrt-ap
l}
lWhere abc123 = passwd; hServ-ap = device name
Adding Users
lEdit the users file
ldixon User-Password == “drbill”
lChange owner of radiusd's log and run directories
to the user you created
l# chown _radiusd /usr/local/var/log/radius
l# chown _radiusd /usr/local/var/run/radiusd
lStart the daemon
l# /usr/local/sbin/radiusd or 'service radiusd start'
based on distribution
Configuring AP
lSupports 802.1X → WPA Enterprise, WPA2
Enterprise or 802.1X in device config
lLog into AP using SSH and enter following
commands:
l# nvram set wl0_akm=”wpa wpa2”
l# nvram set wl0_crypto=”aes+tkip”
l# nvram set wl0_radius_key=”abc123”
l# nvram set wl0_radius_ipaddr=10.10.10.25
l# nvram set wl0_radius_port=1812
l# nvram commit
lThese commands allows your AP to support WPA
and WPA2
Configuring AP
lIf you plan to allow only WPA, substitute different
values for wl0_akm and wl0_crypto
l# nvram set wl0_akm=”wpa”
l# nvram set wl0_crypto=”tkip”
lFor WPA2, use the following
l# nvram set wl0_akm=”wpa2”
l# nvram set wl0_crypto=”aes”
lInstall the 'nas' package
l# ipkg install nas

More Related Content

What's hot

Zookeeper In Action
Zookeeper In ActionZookeeper In Action
Zookeeper In Action
juvenxu
 
Actors, akka, streams
Actors, akka, streamsActors, akka, streams
Actors, akka, streams
Tomer Ben David
 
Build application using sbt
Build application using sbtBuild application using sbt
Build application using sbt
sparrowAnalytics.com
 
Getting Started in AWS and Eucalyptus - AnsibleFest 2013
Getting Started in AWS and Eucalyptus - AnsibleFest 2013Getting Started in AWS and Eucalyptus - AnsibleFest 2013
Getting Started in AWS and Eucalyptus - AnsibleFest 2013
Lester Wade
 
Arcshell SSH Module Overview
Arcshell SSH Module  OverviewArcshell SSH Module  Overview
Arcshell SSH Module Overview
Ethan Ray Post
 
ecs-presentation
ecs-presentationecs-presentation
ecs-presentation
Marc Costello
 
Streaming using Kafka Flink & Elasticsearch
Streaming using Kafka Flink & ElasticsearchStreaming using Kafka Flink & Elasticsearch
Streaming using Kafka Flink & Elasticsearch
Keira Zhou
 
Lab Manual reModernize - Updating and Consolidating MySQL
Lab Manual reModernize - Updating and Consolidating MySQLLab Manual reModernize - Updating and Consolidating MySQL
Lab Manual reModernize - Updating and Consolidating MySQL
Amazon Web Services
 
Administering and Monitoring SolrCloud Clusters
Administering and Monitoring SolrCloud ClustersAdministering and Monitoring SolrCloud Clusters
Administering and Monitoring SolrCloud Clusters
Sematext Group, Inc.
 
(DEV301) Automating AWS with the AWS CLI
(DEV301) Automating AWS with the AWS CLI(DEV301) Automating AWS with the AWS CLI
(DEV301) Automating AWS with the AWS CLI
Amazon Web Services
 
MySQL Audit using Percona audit plugin and ELK
MySQL Audit using Percona audit plugin and ELKMySQL Audit using Percona audit plugin and ELK
MySQL Audit using Percona audit plugin and ELK
YoungHeon (Roy) Kim
 
Docker for dev
Docker for devDocker for dev
Docker for dev
Yusuf Found
 
Zookeeper Introduce
Zookeeper IntroduceZookeeper Introduce
Zookeeper Introduce
jhao niu
 
Monitoring with Exported Resources - PuppetConf 2014
Monitoring with Exported Resources - PuppetConf 2014Monitoring with Exported Resources - PuppetConf 2014
Monitoring with Exported Resources - PuppetConf 2014
Puppet
 
Multiple instance on windows
Multiple instance on windowsMultiple instance on windows
Multiple instance on windows
Vasudeva Rao
 
Configuring Your First Hadoop Cluster On EC2
Configuring Your First Hadoop Cluster On EC2Configuring Your First Hadoop Cluster On EC2
Configuring Your First Hadoop Cluster On EC2
benjaminwootton
 
Monitoring and tuning your chef server - chef conf talk
Monitoring and tuning your chef server - chef conf talk Monitoring and tuning your chef server - chef conf talk
Monitoring and tuning your chef server - chef conf talk
Andrew DuFour
 
Aegir presentation
Aegir presentationAegir presentation
Aegir presentation
Mindtrades
 
Introduction to Oozie | Big Data Hadoop Spark Tutorial | CloudxLab
Introduction to Oozie | Big Data Hadoop Spark Tutorial | CloudxLabIntroduction to Oozie | Big Data Hadoop Spark Tutorial | CloudxLab
Introduction to Oozie | Big Data Hadoop Spark Tutorial | CloudxLab
CloudxLab
 
Apache SolrCloud
Apache SolrCloudApache SolrCloud
Apache SolrCloud
Michał Warecki
 

What's hot (20)

Zookeeper In Action
Zookeeper In ActionZookeeper In Action
Zookeeper In Action
 
Actors, akka, streams
Actors, akka, streamsActors, akka, streams
Actors, akka, streams
 
Build application using sbt
Build application using sbtBuild application using sbt
Build application using sbt
 
Getting Started in AWS and Eucalyptus - AnsibleFest 2013
Getting Started in AWS and Eucalyptus - AnsibleFest 2013Getting Started in AWS and Eucalyptus - AnsibleFest 2013
Getting Started in AWS and Eucalyptus - AnsibleFest 2013
 
Arcshell SSH Module Overview
Arcshell SSH Module  OverviewArcshell SSH Module  Overview
Arcshell SSH Module Overview
 
ecs-presentation
ecs-presentationecs-presentation
ecs-presentation
 
Streaming using Kafka Flink & Elasticsearch
Streaming using Kafka Flink & ElasticsearchStreaming using Kafka Flink & Elasticsearch
Streaming using Kafka Flink & Elasticsearch
 
Lab Manual reModernize - Updating and Consolidating MySQL
Lab Manual reModernize - Updating and Consolidating MySQLLab Manual reModernize - Updating and Consolidating MySQL
Lab Manual reModernize - Updating and Consolidating MySQL
 
Administering and Monitoring SolrCloud Clusters
Administering and Monitoring SolrCloud ClustersAdministering and Monitoring SolrCloud Clusters
Administering and Monitoring SolrCloud Clusters
 
(DEV301) Automating AWS with the AWS CLI
(DEV301) Automating AWS with the AWS CLI(DEV301) Automating AWS with the AWS CLI
(DEV301) Automating AWS with the AWS CLI
 
MySQL Audit using Percona audit plugin and ELK
MySQL Audit using Percona audit plugin and ELKMySQL Audit using Percona audit plugin and ELK
MySQL Audit using Percona audit plugin and ELK
 
Docker for dev
Docker for devDocker for dev
Docker for dev
 
Zookeeper Introduce
Zookeeper IntroduceZookeeper Introduce
Zookeeper Introduce
 
Monitoring with Exported Resources - PuppetConf 2014
Monitoring with Exported Resources - PuppetConf 2014Monitoring with Exported Resources - PuppetConf 2014
Monitoring with Exported Resources - PuppetConf 2014
 
Multiple instance on windows
Multiple instance on windowsMultiple instance on windows
Multiple instance on windows
 
Configuring Your First Hadoop Cluster On EC2
Configuring Your First Hadoop Cluster On EC2Configuring Your First Hadoop Cluster On EC2
Configuring Your First Hadoop Cluster On EC2
 
Monitoring and tuning your chef server - chef conf talk
Monitoring and tuning your chef server - chef conf talk Monitoring and tuning your chef server - chef conf talk
Monitoring and tuning your chef server - chef conf talk
 
Aegir presentation
Aegir presentationAegir presentation
Aegir presentation
 
Introduction to Oozie | Big Data Hadoop Spark Tutorial | CloudxLab
Introduction to Oozie | Big Data Hadoop Spark Tutorial | CloudxLabIntroduction to Oozie | Big Data Hadoop Spark Tutorial | CloudxLab
Introduction to Oozie | Big Data Hadoop Spark Tutorial | CloudxLab
 
Apache SolrCloud
Apache SolrCloudApache SolrCloud
Apache SolrCloud
 

Similar to Wireless_Security

Freeradius edir
Freeradius edirFreeradius edir
Freeradius edir
Jonas Segovia Velazquez
 
Docker Security workshop slides
Docker Security workshop slidesDocker Security workshop slides
Docker Security workshop slides
Docker, Inc.
 
Hadoop security
Hadoop securityHadoop security
Hadoop security
shrey mehrotra
 
Install ldap server
Install ldap serverInstall ldap server
Install ldap server
Mawardi 12
 
Install ldap server
Install ldap serverInstall ldap server
Install ldap server
Mawardi 12
 
Higher order infrastructure: from Docker basics to cluster management - Nicol...
Higher order infrastructure: from Docker basics to cluster management - Nicol...Higher order infrastructure: from Docker basics to cluster management - Nicol...
Higher order infrastructure: from Docker basics to cluster management - Nicol...
Codemotion
 
Deploying and Scaling a Rails Application with Docker and Friends
Deploying and Scaling a Rails Application with Docker and FriendsDeploying and Scaling a Rails Application with Docker and Friends
Deploying and Scaling a Rails Application with Docker and Friends
Invisiblelines
 
How to create a multi tenancy for an interactive data analysis
How to create a multi tenancy for an interactive data analysisHow to create a multi tenancy for an interactive data analysis
How to create a multi tenancy for an interactive data analysis
Tiago Simões
 
Microservices blue-green-deployment-with-docker
Microservices blue-green-deployment-with-dockerMicroservices blue-green-deployment-with-docker
Microservices blue-green-deployment-with-docker
Kidong Lee
 
Rhel6
Rhel6Rhel6
Installing oracle grid infrastructure and database 12c r1
Installing oracle grid infrastructure and database 12c r1Installing oracle grid infrastructure and database 12c r1
Installing oracle grid infrastructure and database 12c r1
Voeurng Sovann
 
Omaha (Google Update) server
Omaha (Google Update) serverOmaha (Google Update) server
Omaha (Google Update) server
Dmitry Lyfar
 
Integration of neutron, nova and designate how to use it and how to configur...
Integration of neutron, nova and designate  how to use it and how to configur...Integration of neutron, nova and designate  how to use it and how to configur...
Integration of neutron, nova and designate how to use it and how to configur...
Miguel Lavalle
 
Intro ProxySQL
Intro ProxySQLIntro ProxySQL
Intro ProxySQL
I Goo Lee
 
Big Data Step-by-Step: Infrastructure 3/3: Taking it to the cloud... easily.....
Big Data Step-by-Step: Infrastructure 3/3: Taking it to the cloud... easily.....Big Data Step-by-Step: Infrastructure 3/3: Taking it to the cloud... easily.....
Big Data Step-by-Step: Infrastructure 3/3: Taking it to the cloud... easily.....
Jeffrey Breen
 
Free radius for wpa2 enterprise with active directory integration
Free radius for wpa2 enterprise with active directory integrationFree radius for wpa2 enterprise with active directory integration
Free radius for wpa2 enterprise with active directory integration
Chanaka Lasantha
 
Troubleshooting Tips from a Docker Support Engineer
Troubleshooting Tips from a Docker Support EngineerTroubleshooting Tips from a Docker Support Engineer
Troubleshooting Tips from a Docker Support Engineer
Jeff Anderson
 
Troubleshooting Tips from a Docker Support Engineer - Jeff Anderson, Docker
Troubleshooting Tips from a Docker Support Engineer - Jeff Anderson, DockerTroubleshooting Tips from a Docker Support Engineer - Jeff Anderson, Docker
Troubleshooting Tips from a Docker Support Engineer - Jeff Anderson, Docker
Docker, Inc.
 
Installation of Subversion on Ubuntu,...
Installation of Subversion on Ubuntu,...Installation of Subversion on Ubuntu,...
Installation of Subversion on Ubuntu,...
wensheng wei
 
SFDX Presentation
SFDX PresentationSFDX Presentation
SFDX Presentation
Bohdan Dovhań
 

Similar to Wireless_Security (20)

Freeradius edir
Freeradius edirFreeradius edir
Freeradius edir
 
Docker Security workshop slides
Docker Security workshop slidesDocker Security workshop slides
Docker Security workshop slides
 
Hadoop security
Hadoop securityHadoop security
Hadoop security
 
Install ldap server
Install ldap serverInstall ldap server
Install ldap server
 
Install ldap server
Install ldap serverInstall ldap server
Install ldap server
 
Higher order infrastructure: from Docker basics to cluster management - Nicol...
Higher order infrastructure: from Docker basics to cluster management - Nicol...Higher order infrastructure: from Docker basics to cluster management - Nicol...
Higher order infrastructure: from Docker basics to cluster management - Nicol...
 
Deploying and Scaling a Rails Application with Docker and Friends
Deploying and Scaling a Rails Application with Docker and FriendsDeploying and Scaling a Rails Application with Docker and Friends
Deploying and Scaling a Rails Application with Docker and Friends
 
How to create a multi tenancy for an interactive data analysis
How to create a multi tenancy for an interactive data analysisHow to create a multi tenancy for an interactive data analysis
How to create a multi tenancy for an interactive data analysis
 
Microservices blue-green-deployment-with-docker
Microservices blue-green-deployment-with-dockerMicroservices blue-green-deployment-with-docker
Microservices blue-green-deployment-with-docker
 
Rhel6
Rhel6Rhel6
Rhel6
 
Installing oracle grid infrastructure and database 12c r1
Installing oracle grid infrastructure and database 12c r1Installing oracle grid infrastructure and database 12c r1
Installing oracle grid infrastructure and database 12c r1
 
Omaha (Google Update) server
Omaha (Google Update) serverOmaha (Google Update) server
Omaha (Google Update) server
 
Integration of neutron, nova and designate how to use it and how to configur...
Integration of neutron, nova and designate  how to use it and how to configur...Integration of neutron, nova and designate  how to use it and how to configur...
Integration of neutron, nova and designate how to use it and how to configur...
 
Intro ProxySQL
Intro ProxySQLIntro ProxySQL
Intro ProxySQL
 
Big Data Step-by-Step: Infrastructure 3/3: Taking it to the cloud... easily.....
Big Data Step-by-Step: Infrastructure 3/3: Taking it to the cloud... easily.....Big Data Step-by-Step: Infrastructure 3/3: Taking it to the cloud... easily.....
Big Data Step-by-Step: Infrastructure 3/3: Taking it to the cloud... easily.....
 
Free radius for wpa2 enterprise with active directory integration
Free radius for wpa2 enterprise with active directory integrationFree radius for wpa2 enterprise with active directory integration
Free radius for wpa2 enterprise with active directory integration
 
Troubleshooting Tips from a Docker Support Engineer
Troubleshooting Tips from a Docker Support EngineerTroubleshooting Tips from a Docker Support Engineer
Troubleshooting Tips from a Docker Support Engineer
 
Troubleshooting Tips from a Docker Support Engineer - Jeff Anderson, Docker
Troubleshooting Tips from a Docker Support Engineer - Jeff Anderson, DockerTroubleshooting Tips from a Docker Support Engineer - Jeff Anderson, Docker
Troubleshooting Tips from a Docker Support Engineer - Jeff Anderson, Docker
 
Installation of Subversion on Ubuntu,...
Installation of Subversion on Ubuntu,...Installation of Subversion on Ubuntu,...
Installation of Subversion on Ubuntu,...
 
SFDX Presentation
SFDX PresentationSFDX Presentation
SFDX Presentation
 

Wireless_Security

  • 1. DICKSON ALORWORNU New York Institute of Technology Spring 2015
  • 2. Wireless Security lUsing Fine-Grained Authentication for Your Wireless Network(per user auth for 802.11) by setting up a RADIUS server featuring FreeRadius
  • 3. Using Fine-Grained Authentication Deploy a Radius Server http://www.freeradius.org/getting.html 1. Upack and change into directory 2. Build by running './configure && make' 3. Authenticate as root and run 'make install'
  • 4. Create a User lYou'll need to create a user to run under like _dixon lEdit FreeRadius's config file → radiusd.conf lIf you did not specify an alternate installation prefix when running configure, it should be in /usr/local/etc/raddb
  • 5. Config lSearch for user = nobody to find a good location lUser = _dixon lGroup = _dixon lEdit eap.conf in same directory to locate following line in eap section: ldefault_eap_type = md5 -> default_eap_type = peap
  • 6. Config lUncomment the following lines: ldh_file = ${raddbdir}/certs/dh lrandom_file = ${raddbdir}/certs/random lUncomment the peap section and the following line l # default_eap_type = mschapv2
  • 7. Config_Auth lTo allow the authenticator to access it, edit the clients.conf file and add the following entry (set in your env) lclient 10.10.10.100 { labc123 = authpass lhServ1 = openwrt-ap l} lWhere abc123 = passwd; hServ-ap = device name
  • 8. Adding Users lEdit the users file ldixon User-Password == “drbill” lChange owner of radiusd's log and run directories to the user you created l# chown _radiusd /usr/local/var/log/radius l# chown _radiusd /usr/local/var/run/radiusd lStart the daemon l# /usr/local/sbin/radiusd or 'service radiusd start' based on distribution
  • 9. Configuring AP lSupports 802.1X → WPA Enterprise, WPA2 Enterprise or 802.1X in device config lLog into AP using SSH and enter following commands: l# nvram set wl0_akm=”wpa wpa2” l# nvram set wl0_crypto=”aes+tkip” l# nvram set wl0_radius_key=”abc123” l# nvram set wl0_radius_ipaddr=10.10.10.25 l# nvram set wl0_radius_port=1812 l# nvram commit lThese commands allows your AP to support WPA and WPA2
  • 10. Configuring AP lIf you plan to allow only WPA, substitute different values for wl0_akm and wl0_crypto l# nvram set wl0_akm=”wpa” l# nvram set wl0_crypto=”tkip” lFor WPA2, use the following l# nvram set wl0_akm=”wpa2” l# nvram set wl0_crypto=”aes” lInstall the 'nas' package l# ipkg install nas