How to Use QNAP NAS as a RADIUS Server?

Last modified date: 2021-03-30

The RADIUS (Remote Authentication Dial In User Service) server feature of QNAP NAS provides centralized Authentication and Authorization management for computers to connect and use a network service.

Only PAP, EAP-TLS/PAP, and EAP-TTLS/PAP authentication is supported for system user accounts.
Only routers which support WPA-enterprise or WPA2-enterprise and 802.1X are supported.

QNAP RADIUS Architecture

Users request permission to use the wireless network.
The wireless router receives the request and transfers it to the RADIUS server (QNAP NAS).
The RADIUS server receives the request and processes the information.
The RADIUS server sends the result back to the wireless router.
The wireless router will allow or deny the user based on the results the RADIUS server sends back.

Follow the below steps to set up a QNAP NAS as a RADIUS server:

Set up RADIUS server via QNAP NAS

1. Log into the NAS as an administrator. Go to "Control Panel" > "Applications" > "RADIUS Server" and tick "Enable RADIUS Server" in the "Server Settings" page.

Select "Grant dial-in access to system user accounts" to allow local NAS users to use the RADIUS service.

2. Go to "RADIUS Server" > "RADIUS Clients". Click "Create a Client" to create RADIUS clients (wireless routers, etc).

The NAS supports up to 10 RADIUS clients.

3. Enter the client information and click "Apply". You can enable, disable and edit client information here.

Name: The name of the client.
IP Address: The IP address the client allocates.
Prefix Length: The client’s prefix length which can decide the allocation range and numbers of the IP address.
Secret Key: Connection key between the RADIUS server and client.

The IP address and prefix length use CIDR (Classless Inter-Domain Routing) representation.

Example:

Prefix Length	Class	Hosts*	Mask
32	1/256C	1	255.255.255.255
31	1/128C	2	255.255.255.254
30	1/64C	4	255.255.255.252
29	1/32C	8	255.255.255.248
28	1/16C	16	255.255.255.240
27	1/8C	32	255.255.255.224
26	1/4C	64	255.255.255.192
25	1/2C	128	255.255.255.128
24	1C	256	255.255.255.000
23	2C	512	255.255.254.000

For more information about CIDR, please refer to:
https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing

4. Go to "RADIUS Server" > "RADIUS Users" and click "Create a New User" to add RADIUS users. You can also delete, enable, or disable the RADIUS users on this page.

The number of RADIUS users the NAS supports is the same as the maximum number of users supported.

Set up RADIUS client (using a wireless router as an example)

Enter the RADIUS server (QNAP NAS) information on the RADIUS client (wireless router). Using an ASUS-AC66U as an example:

1. Go to “Wireless” > “General”. Under “Authentication Method” choose “WPA2-Enterprise”.

2. Go to “Wireless” > “RADIUS Setting”.

Server IP Address: Enter the QNAP NAS IP address.
Server Port: 1812 (Default port of Radius authentication).
Connection Secret: Enter the secret key that was set in "RADIUS Server" > "RADIUS Clients".

3. After setting the NAS as a RADIUS server and having configured the settings on the client (wireless router), you will be authenticated by the NAS when trying to access the Wi-Fi network.

Connect to Wi-Fi via iOS

1. Enable Wi-Fi and choose the wireless network you want to connect to. Here we use an ASUS-AC66U-2.4G as an example.

2. Enter the username and password configured in "RADIUS Server" > "RADIUS Users". If "Grant dial-in access to system user accounts" is enabled, you can access the Wi-Fi network using the login information of a local NAS user.

3. Accept the certificate.

4. You can connect to the Wi-Fi network upon logging in.

Connect to Wi-Fi via Android

1. Enable Wi-Fi and choose the wireless network you want to connect to. Here we use an ASUS-AC66U-2.4G as an example.

QNAP

3. You can connect to the Wi-Fi network upon logging in.

QNAP

Connect to Wi-Fi via Mac OS

1. Open Wi-Fi and choose "Join Other Network".

2. Enter the information like below.

Network Name: The Wireless network you want to connect to (using an ASUS-AC66U-2.4G as an example).
Security: Choose "WPA2 Enterprise".
Username/Password: Enter the username and password configured in "RADIUS Server" > "RADIUS Users". If "Grant dial-in access to system user accounts" is enabled, you can access the Wi-Fi network using the login information of a local NAS user.

3. You can connect to the Wi-Fi network upon logging in.

Connect to Wi-Fi via Windows 10

1. Go to "Settings" and choose "Network & Internet".

2. Choose "Dial-up" > "Set up a new connection".

3. Choose "Manually connect to a wireless network".

4. Enter the information like below and click "Next".

Network Name: The Wireless network you want to connect to (using an ASUS-AC66U-2.4G as an example).
Security type: Choose "WPA2-Enterprise".

5. Select "Change connection settings".

6. Go to "Security" and choose the network authentication method "Microsoft: Protected EAP(PEAP)". Click "Settings".

7. Disable "Verify the server’s identity by validating the certificate" and in "Select Authentication Method", choose "Secured password (EAP-MSCHAP v2)" then press "Configure".

8. Disable "Automatically use my Windows logon name and password (and domain if any)."

9. Go to the wireless settings and choose the Wi-Fi connection to connect to.

10. Enter the username and password configured in "RADIUS Server" > "RADIUS Users". If "Grant dial-in access to system user accounts" is enabled, you can access the Wi-Fi network using the login information of a local NAS user.

11. Upon logging in, you can now connect to the Wi-Fi network.

Was this article helpful?

Yes. No.

69% of people think it helps.

Please tell us how this article can be improved:

The article is missing important information
The article's solutions do not work
The article is too complicated
The article contains incorrect information
The article is out-of-date

If you want to provide additional feedback, please include it below.

Depolama

Ağ Oluşturma

Genişletme Aksesuarları

Gözetim

NAS