[Ubuntu] Radsecproy for secure Radius over WAN

Mon, 27 Jun 2016 11:51:44 +0000

Chances are you going to need an radius Auth over WAN - because your Radius and Identity Mngmnt is hosted in the security of the local datacenter of your corp… but the client (i.e. an network switch) is somewhere over the ~~rainbow~~ WAN. You could just pipe the radius traffic over the internet - but there be dragons: radius communication is unencrypted. So… just no.

Enter radsecproxy: Radsecproxy is - as the name implies, an radius proxy - which needs to be installed on both servers (the local one in your company, now called SERVER, and the remote one with the switch attached, now called CLIENT) - and does encrypt the communication between both server parts (over WAN i.e.) via TLS.

Radsecproxy on Nico Maas

[Ubuntu] Radsecproy for secure Radius over WAN