102Network - amagerard/FreeRadius GitHub Wiki

HOME

RedHat/Daloradius

01- Synoptic 02 Network 03 Daloradius 04 Selinux
05 Backup 06 GnomeShell 07 Accounting
FreeRadius OpenLdap ADserver

2. Network.

2.1 Prerequisites.

The status of selinux is permissive.
vi /etc/crontab

@reboot root setenforce 0  

reboot

2.2 Network configuration.

See Daloradius synoptic.

This procedure is based on this example.
Ip daloradius:               192.168.70.41
Gateway daloradius :  192.168.70.254
IP freeradius:               192.168.50.41
Ip dns1 :                        192.168.90.41

Domain :     ol26modk.com
Servers name:
daloradius.ol26modk.com
freeradius.ol26modk.com
dns1.ol26modk.com

vi /etc/hostname

daloradius  

Au prompt vous aurez : <username>@daloradius.

vi /etc/hosts

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4  
192.168.70.41  daloradius.ol26modk.com  daloradius  

vi /etc/sysconfig/network

 # Created by anaconda  
# # Created by anaconda  
 networking=yes  
 HOSTNAME=daloradius.ol26modk.com  

Change Network.
Example:
IP: 192.168.70.41/24
Gateway: 192.168.70.254
Name Server: 192.168.90.41
Search domain: ol26modk.com
nmcli con mod eth0 ipv4.method "manual" ipv4.addresses 192.168.70.41/24
nmcli con mod eth0 ipv4.gateway 192.168.70.254
nmcli con mod eth0 ipv4.dns 192.168.90.41
nmcli con mod eth0 ipv4.dns-search ol26modk.com

Read the new network configuration.
more /etc/NetworkManager/system-connections/eth0.nmconnection

Apply the new network configuration.

ifconfig eth0 0.0.0.0
systemctl restart NetworkManager
ifconfig eth0

Update :

RedHat may ask you to make a new subscription.
subscription-manager register --username <username> --password <password> --auto-attach --force

dnf update

Uninstall msmtp if you are using a mail server.
dnf remove msmtp

2.3 Firewall.

Take over the rules of the TemplateVM firewall.
See Firewall Configuration.

2.3.1 Add the ports.

vi /etc/ufw/applications.d/ufw-custom

[MYSQL]  
title=Mysql  
description=Mysql 3306  
ports=3306/tcp  

ufw reload

2.3.2 Add the rules.

ufw allow MYSQL  
ufw allow 'WWW Full'  

ufw status verbose

Status: active  
Logging: on (medium)  
Default: deny (incoming), deny (outgoing), disabled (routed)  
New profiles: skip  
To                         Action      From  
--                         ------      ----  
22                         ALLOW IN    192.168.20.0/29  
3306/tcp (MYSQL)           ALLOW IN    Anywhere  
80,443/tcp (WWW Full)      ALLOW IN    Anywhere  
  
80,443/tcp (WWW Full)      ALLOW OUT   Anywhere  
25/tcp (SMTP)              ALLOW OUT   Anywhere  
53 (DNS)                   ALLOW OUT   Anywhere  
67,68/udp (DHCP)           ALLOW OUT   Anywhere  
123/udp (NTP2)             ALLOW OUT   Anywhere  
465/tcp (SMTP SSL)         ALLOW OUT   Anywhere  
587/tcp (SMTP TLS)         ALLOW OUT   Anywhere  
993/tcp (IMAP SSL)         ALLOW OUT   Anywhere  
143/tcp (IMAP TLS)         ALLOW OUT   Anywhere  
⚠️ **GitHub.com Fallback** ⚠️