Page History

...

1. Prepare a Linux server with a distribution of choice and install the following packages at a minimum:
   vconfig -> provides the VLAN configuration tool vconfig (separate download required:
         http://www.candelatech.com/~greear/vlan.html^{Image Removed}).
   chillispot -> provides the web-redirect portal binary, chilli (version 1.1.0 is on openSUSE 10.2
         installation media).
   iptables -> provides firewall manipulation tools iptables, ip6tables (version 1.3.6 is on openSUSE 10.2
         installation media).
   apache2 -> provides the web server for the web-redirect portal httpd (version 2.2.3 is on openSUSE
         10.2 installation media).
   MySQL -> provides the datastore for user accounts mysql (version 5.0.26 is on openSUSE 10.2
          installation media).
   apache2-mod-perl -> enables execution of perl CGIs (version 2.0.2 is on openSUSE 10.2 installation
          media).
   php5 -> provides php (version 5.2.0 is on openSUSE 10.2 installation media).
   phpmyprepaid -> provides user management web interface (separate download required:
          http://sourceforge.net/projects/phpmyprepaid^{Image Removed}, in this deployment version 0.3.3 is in use).
   freeradius -> provides the RADIUS server radiusd (version 1.1.3 is on openSUSE 10.2 installation
          media).
   ○ dhcp-server -> provides the DHCP server dhcpd (version 3.0.5 is on openSUSE 10.2 installation
          media).
2. Ensure the following configurations are met:
   Kernel: must support
          IEEE 802.1q VLANs
          tun/tap network interfaces
          netfilter
          must have routing capabilities
   Note: The openSUSE 10.2 kernel supports all of the above.

...

It is useful to put VLAN definitions, IP allocations, firewall ruleset application into an init script to automate theboot process, an example init script is provided at http://www.eduroam.org/downloads/docs/eduroamcookbook-^{Image Removed}\-
scripts.zip.

     3.  Add dhcpd, mysql, apache2, freeradius, chilli (init script included) to default runlevel (init script from
          above should have precedence); under SUSE, runlevels are manipulated with "insserv":
          insserv chilli-init
          insserv dhcpd
          insserv mysql
          insserv apache2
          insserv freeradius
          insserv chilli
     4. Attached for convenience
         init script for VLANs, IP
         init script for chilli daemon
         chilli.conf (comments stripped)
         dhcpd.conf (comments stripped)
         modified iptables ruleset
         /etc/raddb files (comments stripped)
         sample Lancom AP config (shared secrets, IP info strippedI