Exploring the Unseen:

FreeRadius, LDAP and dynamic VLAN assignment

A long time ago I was interested in find out how I can use my installed FreeRadius to dynamically assign a VLAN based on an Actice Directory Group. First I’ll show my current setup:

1. Microsoft Active Directory Domain Controller (Windows Server 2012 R2)
2. FreeRadius (openSUSE Leap 15.3) – Installation instruction https://stangneth.com/2021/05/26/freeradius-on-opensuse/
3. HP ProCurve 2810-24G
4. Client (Windows 10 21H2)

Active Directory group

After creating a local security group in Active Directory I assigned it to a User.

FreeRadius on openSUSE

I changed my private wifi from WPA2 to WPA2-Enterprise. I no longer have to enter a one-time password, but can enable authentication using a username and password. For this scenario I’m using my MS Active Directory and a FreeRadius Server. Following you can find my configuration. Feel free to write comments or corrections in the comment-section.

Requirements

• Static IP
• /etc/hosts is showing to the Hostname /etc/HOSTNAME
• DNS Server is an Active Directory Domain Controller or can dissolve all Active Directory entries
• Chrony configured