The other day I was setting up a RADIUS server on Debian Etch for EAP-PEAP wlan auth. Or at least I was trying to. It didn't take long to find out that the freeradius binary from the etch repository had no EAP-TLS/TTLS/PEAP support, due to licensing conflicts between freeradius and openssl. I looked at several guides on rebuilding freeradius to get around this but none of them quite met my needs.

This is all that was required in the end:

apt-get source freeradius

:edit configure options in /debian/rules to enable tls, ttls, etc:
cd [src dir]/
:apt-get install missing dependancies:
dpkg-buildpackage -d
dpkg -i freeradius-*.deb

Posted by ra at 22:07 | Comments (0) | Trackbacks (0)

I mentioned in a previous post that I had, for a time, both DSL and cable internet; but I didn't go into detail about how had my router hooked up to both lines, routing traffic over them concurrently. It's time to rectify that omission. Although this multihomed configuration did not last long, I'm still using pretty much the same tools/config to take advantage of the multiple IP addresses I've managed to snag from my ISP.

This is how I've setup my Linux 2.6-based router using 'ip route', 'ip rule' and iptables to get WAN-bound traffic coming from the local subnets to exit one of several WAN links depending on different criteria; mostly source IP.

Posted by ra in computerish at 22:49 | Comments (0) | Trackbacks (0)

During the past couple months of Internet service switching I was hoping to get some type of service that would allow me one or more static IP's. But in the end I found myself back on cable again, with nothing but DHCP. Static addresses wishes dashed, I then wondered if it was possible to get multiple IP's, even if they were randomly assigned.

Basically I wanted to see if it was possible to get multiple DHCP-allocated addresses on a single machine and from the same physical network/DHCP servers. This may sound unusual, impossible or pointless, but I had some uses in mind... and since my router is a PC running Linux rather than some proprietary device, I figured there was probably a way to do it. One of the appeals was the idea that I could have traffic from my public (open wireless) originate from a different public IP than my private local networks. So I set about playing with DHCP to see what I could do.

Posted by ra at 23:23 | Comments (0) | Trackbacks (0)