FreeRADIUS includes a RADIUS server, a BSD licensed client library, a PAM library, and an Apache module. In most cases, the word FreeRADIUS refers to the RADIUS server.

It is also widely used for Enterprise Wi-Fi and IEEE 802.1X network security, particularly in the academic community, including eduroam.

Plugin Changelog

1.10.2

* Add configurable LDAP group membership mode (contributed by Jerzy Ko%c5%82osowski)

1.10.1

* Add TLS maximum version setting for EAP (contributed by Kota Shiratsuka)

1.10

* Change max TLS version to 1.3 and allow min TLS version 1.3 (contributed by Joerg Werner) * Add option to enable EAP-PWD (contributed by Severin Sch%c3%bcller)

1.9.28

* Add Groups for VLAN assignment * Add fallback PPSK (contributed by Tobias Perschon) * Add fallback Tunnel-Password field (contributed by Robert Resch)

1.9.27

* Allow EAP-TLS with multiple CAs (contributed by RasAlGhul)

1.9.26

* Added support for "require_message_authenticator" in client configuration (contributed by Patrick M. Hausen)

1.9.25

* Added support for remote syslog

1.9.24

* Allow ":" character in usernames and passwords (contributed by Chris Helming)

1.9.23

* Support NT hash of user password (contributed by Stuart McLaren)

1.9.22

* Add Proxy configuration page: HomeServer, HomeServerPool, Realm

1.9.21

* Add Certificate, StartTLS and Server port for LDAP Connection

1.9.20

* Remove TTLS-GTC from Default EAP Type (#2421)

1.9.19

* Allow to use LDAP in inner-tunnel (needed for LDAP authentication within 802.1X)

1.9.18

* Added support for fallback VLAN

1.9.17

* Added support for Extreme networks EXOS switch Extreme-Netlogin-Extended-VLAN VSA and policy for GEN2 (contributed by Pasi Suominen) * Allow setting of minimum TLS version

1.9.16

* Allow user to choose Elliptic Curve in EAP * Allow client secrets starting with hash sign

1.9.15

* Fixed validation of CIDR for client network ranges

1.9.14

* Updates comments in mods-enabled-eap to match upstream version 3.0.22 * Set TLS minimum version to 1.0 for compatibility with older EAP clients

1.9.13

* Remove LEAP section from configuration

1.9.12

* Fix leading space in freeradius logformat (contributed by nan0)

1.9.11

* Add IPv6 support to client IP

1.9.10

* Add HA config sync

1.9.9

* Create option to set EAP-TTLS-GTC (contributed by Kjeld Schouten-Lebbing) * Add LDAP reply Mikrotik-Wireless-VLANID and Mikrotik-Wireless-VLANID-type (contributed by foxikmax) * Fix DHCP support

1.9.8

* Add support for checking TLS certificate names * Allow / and @ as part of the user-names * Allow TLS as the default EAP type

1.9.7

* Fix Login-Time validation

1.9.6

* Fix log not properly parsed

1.9.5

* Fix SQLite support

1.9.4

* Add Service-Type to user form

1.9.0

* Add DHCP support, serving only for DHCP relays * Allow usage of remote MySQL server * Rework service status UI