Docker Freeradius (+daloradius)

docker run --rm freeradius/freeradius-server cat /etc/raddb/mods-config/sql/main/mysql/schema.sql > ./01-freeradius.sql

docker-compose.yml

services:
  freeradius:
    image: freeradius/freeradius-server:latest
    container_name: radius_server
    volumes:
      - ./config/clients.conf:/etc/raddb/clients.conf
      - ./config/users:/etc/raddb/users
      - ./config/sql:/etc/raddb/mods-enabled/sql
    ports:
      - "1812:1812/udp" # Puerto de Autenticación
      - "1813:1813/udp" # Puerto de Accounting (opcional)
    command: freeradius -X    
    tty: true
    stdin_open: true
    restart: always

clients.conf

client network_devices {
    ipaddr      = 0.0.0.0/0
    secret      = testing123  # Esta es la "Shared Secret" que pondrás en tu Router/AP
}

sql

sql {
    driver = "rlm_sql_mysql"
    server = "192.168.30.51"
    port = "3306"
    login = "radius"
    password = "***"
    radius_db = "radius"
 
#    sqllog = yes
#    trace = yes
 
    pool {
        # Reduce el mínimo de conexiones permanentes a 0 o 1
        min = 0
 
        # Número máximo de conexiones
        max = 5 
 
        # Conexiones de reserva
        spare = 1
 
        # Segundos antes de cerrar una conexión inactiva
        idle_timeout = 60
    }
 
    sqllog {
        logfile = "/var/log/sql.log"
    }
 
    authcheck_table = "radcheck"
    authreply_table = "radreply"
    usergroup_table = "radusergroup"
    groupcheck_table = "radgroupcheck"
    groupreply_table = "radgroupreply"
    group_attribute = "SQL-Group"
    client_table = "nas"
 
    # Tablas de Accounting / Registros de conexión
    acct_table1 = "radacct"
    acct_table2 = "radacct"
    postauth_table = "radpostauth"
 
    $INCLUDE ${modconfdir}/${.:name}/main/mysql/queries.conf
}

echo -n "tu_contraseña" | openssl dgst -sha256

SELECT SHA2('tu_contraseña', 256);

sudo apt install whois
mkpasswd -m sha-512 mi_clave_123