Ironchip RADIUS server

Through this guide, we will show how to install the Ironchip Radius Server plugin that allows integrating Radius-compatible services using an API Key without the need to use NPS.

Create the application in Ironchip

The first step is to create an API Key application in the Ironchip panel:

To do this, go to Applications and click on New Application.

In the first box titled Custom application, click on Create application.

Give it an identifying name and select API KEY type. Click Add service.

Finally, download the file that contains the API KEY.

Installation and configuration

You must download the installation file, download it from one of the following links depending on your operating system:

Windows: https://nexus6.kydom.net/repository/Ironchip_RADIUS_Server/1.0.0/windows/ironchip-radius-server.exe

Linux: https://nexus6.kydom.net/repository/Ironchip_RADIUS_Server/1.0.0/linux/ironchip-radius-server

Once downloaded, move the installer to an appropriate location and create a file with the name "ironchip-radius-server" and extension ".json".

Inside this file, paste the following text:

{
    "radius_address":"0.0.0.0:1812",
    "radius_key":"secret",
    "ironchip_api_host":"<https://api.ironchip.com>",
    "ironchip_api_secret":"",
    "log_level": "info"
}

Modify the following fields:

Radius_key: The shared secret between the service and Ironchip. This secret is one of your choice, but it must be the same in both the file and the service.

Ironchip_api_secret: The API Key obtained when creating the application in the Ironchip panel.

Once you have modified and saved the file in the same location as the installer, open a PowerShell terminal and follow these steps:

Go to the location where the two files are located using the following command:

cd <file path>

Example:

Once in this location, run the installer using the following command:

./ironchip-radius-server s install

And start the service:

./ironchip-radius-server s start

Example:

The last step is to configure the service you want to secure using Ironchip.

Authentication example

In the following video, it shows how to access a Watchguard VPN with the Ironchip Radius Server plugin in operation.

Note that in the video, a password is entered because Watchguard does not allow empty fields in this case. However, the text in this field can be random, as in the two examples in the video.