Cloud RADIUS using FreeRADIUS + daloRADIUS on Ubuntu 24.04 + support

This AMI delivers a fully pre-configured RADIUS stack - FreeRADIUS, daloRADIUS management GUI, and MariaDB backend - ready to authenticate users immediately after launch. Instead of spending hours installing packages, configuring database schemas, and integrating components, you get a tested, production-ready deployment with vendor-provided support and maintenance from Cloud Infrastructure Services.

This is a repackaged open source software product wherein additional charges apply for support & maintenance.

FreeRADIUS is the most widely deployed RADIUS server in the world, forming the basis for many commercial RADIUS products. This AMI packages that proven technology with a web-based management interface and AWS-native integrations so your team can focus on network policy rather than server administration.

• Eliminate per-device VPN configuration - Centralize authentication for all remote access connections through a single RADIUS policy engine
• Unify wireless access control - Authenticate 802.1x WiFi users against Active Directory, LDAP, or local databases without managing credentials on each access point
• Simplify multi-vendor environments - Support almost one hundred vendor-specific attribute dictionaries including Cisco, Juniper, HP ProCurve, Microsoft, and more from a single server
• Reduce onboarding/offboarding time - Add or remove network access for users in one place rather than updating every switch, AP, and VPN concentrator

• FreeRADIUS - High-performance multi-protocol policy server supporting RADIUS, TACACS+, and VMPS
• daloRADIUS - Web-based management GUI for user administration, reporting, accounting graphs, hotspot management, and billing
• MariaDB - Backend database pre-configured with the RADIUS schema on the EC2 instance
• Ubuntu 24.04 LTS - Long-term support operating system base

• Simple authentication: PAP, CHAP, MS-CHAP, MS-CHAPv2, SIP Digest
• EAP types: EAP-MD5, EAP-SIM, EAP-TLS, EAP-TTLS, EAP-PEAP, Cisco LEAP
• Full RFC 2865 and RFC 2866 compliance
• Pre-authentication and post-authentication policy support
• IP Pool management and VLAN assignment via VMPS protocol
• RADIUS proxying for distributed deployments
• Multiple virtual server instances

• AWS Directory Service - Authenticate users against AWS Managed Microsoft AD or Simple AD
• Active Directory and LDAP - Connect to existing directory infrastructure within your VPC
• VPC Security - Deploy within private subnets with security groups restricting RADIUS ports (1812/1813) to authorized NAS devices only
• CloudWatch - Monitor RADIUS server performance, authentication success/failure rates, and accounting metrics
• Multi-AZ Deployment - Deploy across multiple availability zones for high availability
• Auto Scaling - Compatible with AWS Auto Scaling groups for handling variable authentication loads

• User Management - Create, modify, and disable RADIUS users through an intuitive web interface
• Visual Reporting - Real-time accounting data with graphs showing bandwidth usage, session duration, and connection patterns
• Activity Monitoring - Track authentication attempts, active sessions, and user connection history
• Hotspot Management - Configure captive portals and manage wireless hotspot access
• Billing Engine - Integrated billing for ISP and service provider deployments
• Geographic Mapping - GoogleMaps integration for geo-locating connected users and NAS devices

1. Launch the AMI in your VPC with a security group allowing UDP ports 1812 and 1813 from your NAS devices, and HTTPS (443) for daloRADIUS access
2. Follow our getting started guide under vendor resources below for setup & configuration details.

FreeRADIUS authenticates users on 802.1x WiFi networks, dial-up connections, PPPoE, VPNs, VoIP systems, authenticating switches, and ISP subscriber management. Control access based on user identity, IP address, device type, AD group membership, time of day, and custom policies.

Licensing: FreeRADIUS and daloRADIUS are licensed under GNU General Public License v2.0.