QNAP, Inc. - Network Attached Storage (NAS)

Language

Support

How to Use QNAP NAS as a RADIUS Server?

Set up a RADIUS server via QNAP NAS

Set up a RADIUS client (using a wireless router as an example)

Connect to Wi-Fi via iOS

Connect to Wi-Fi via Mac OS

Connect to Wi-Fi via Windows 10

 

The RADIUS (Remote Authentication Dial In User Service) server feature of QNAP NAS provides centralized Authentication and Authorization management for computers to connect and use a network service.

  • Only PAP, EAP-TLS/PAP, and EAP-TTLS/PAP authentication is supported for system user accounts.
  • Only routers which support WPA-enterprise or WPA2-enterprise and 802.1X are supported.

 

QNAP
QNAP RADIUS Architecture

  1. Users request permission to use the wireless network.
  2. The wireless router receives the request and transfers it to the RADIUS server (QNAP NAS).
  3. The RADIUS server receives the request and processes the information.
  4. The RADIUS server sends the result back to the wireless router.
  5. The wireless router will allow or deny the user based on the results the RADIUS server sends back.

Follow the below steps to set up a QNAP NAS as a RADIUS server:

Set up RADIUS server via QNAP NAS

1. Log into the NAS as an administrator. Go to "Control Panel" > "Applications" > "RADIUS Server" and tick "Enable RADIUS Server" in the "Server Settings" page.

  • Select "Grant dial-in access to system user accounts" to allow local NAS users to use the RADIUS service.

 

QNAP

2. Go to "RADIUS Server" > "RADIUS Clients". Click "Create a Client" to create RADIUS clients (wireless routers, etc).

  • The NAS supports up to 10 RADIUS clients.

 

QNAP

3. Enter the client information and click "Apply". You can enable, disable and edit client information here.

  • Name: The name of the client.
  • IP Address: The IP address the client allocates.
  • Prefix Length: The client’s prefix length which can decide the allocation range and numbers of the IP address.
  • Secret Key: Connection key between the RADIUS server and client.

 

QNAP

The IP address and prefix length use CIDR (Classless Inter-Domain Routing) representation.

Example:

Prefix Length
Class
Hosts*
Mask
32
1/256C
1
255.255.255.255
31
1/128C
2
255.255.255.254
30
1/64C
4
255.255.255.252
29
1/32C
8
255.255.255.248
28
1/16C
16
255.255.255.240
27
1/8C
32
255.255.255.224
26
1/4C
64
255.255.255.192
25
1/2C
128
255.255.255.128
24
1C
256
255.255.255.000
23
2C
512
255.255.254.000

 

For more information about CIDR, please refer to:
https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing

4. Go to "RADIUS Server" > "RADIUS Users" and click "Create a New User" to add RADIUS users. You can also delete, enable, or disable the RADIUS users on this page.

  • The number of RADIUS users the NAS supports is the same as the maximum number of users supported.
QNAP
 
QNAP

 

Set up RADIUS client (using a wireless router as an example)

Enter the RADIUS server (QNAP NAS) information on the RADIUS client (wireless router). Using an ASUS-AC66U as an example:

1. Go to “Wireless” > “General”. Under “Authentication Method” choose “WPA2-Enterprise”.

QNAP

2. Go to “Wireless” > “RADIUS Setting”.

  • Server IP Address: Enter the QNAP NAS IP address.
  • Server Port: 1812 (Default port of Radius authentication).
  • Connection Secret: Enter the secret key that was set in "RADIUS Server" > "RADIUS Clients".

 

QNAP

3. After setting the NAS as a RADIUS server and having configured the settings on the client (wireless router), you will be authenticated by the NAS when trying to access the Wi-Fi network.

 

Connect to Wi-Fi via iOS

1. Enable Wi-Fi and choose the wireless network you want to connect to. Here we use an ASUS-AC66U-2.4G as an example.

QNAP

2. Enter the username and password configured in "RADIUS Server" > "RADIUS Users". If "Grant dial-in access to system user accounts" is enabled, you can access the Wi-Fi network using the login information of a local NAS user.

QNAP

3. Accept the certificate.

QNAP

4. You can connect to the Wi-Fi network upon logging in.

 

Connect to Wi-Fi via Mac OS

1. Open Wi-Fi and choose "Join Other Network".

QNAP

2. Enter the information like below.

  • Network Name: The Wireless network you want to connect to (using an ASUS-AC66U-2.4G as an example).
  • Security: Choose "WPA2 Enterprise".
  • Username/Password: Enter the username and password configured in "RADIUS Server" > "RADIUS Users". If "Grant dial-in access to system user accounts" is enabled, you can access the Wi-Fi network using the login information of a local NAS user.

 

QNAP

3. You can connect to the Wi-Fi network upon logging in.

 

Connect to Wi-Fi via Windows 10

1. Go to "Settings" and choose "Network & Internet".

QNAP

2. Choose "Dial-up" > "Set up a new connection".

QNAP

3. Choose "Manually connect to a wireless network".

QNAP

4. Enter the information like below and click "Next".

  • Network Name: The Wireless network you want to connect to (using an ASUS-AC66U-2.4G as an example).
  • Security type: Choose "WPA2-Enterprise".

 

QNAP

5. Select "Change connection settings".

QNAP

6. Go to "Security" and choose the network authentication method "Microsoft: Protected EAP(PEAP)". Click "Settings".

QNAP

7. Disable "Verify the server’s identity by validating the certificate" and in "Select Authentication Method", choose "Secured password (EAP-MSCHAP v2)" then press "Configure".

QNAP

8. Disable "Automatically use my Windows logon name and password (and domain if any)."

QNAP

9. Go to the wireless settings and choose the Wi-Fi connection to connect to.

QNAP

10. Enter the username and password configured in "RADIUS Server" > "RADIUS Users". If "Grant dial-in access to system user accounts" is enabled, you can access the Wi-Fi network using the login information of a local NAS user.

QNAP

11. Upon logging in, you can now connect to the Wi-Fi network.

 

Release date: 2013-07-03
Was it helpful?
Thank you for your feedback.
Thank you for your feedback. If you have any question, please contact support@qnap.com
78% of people think it helps.