Deploy the local RADIUS server container using Docker on Linux

In this topic, you will learn how to deploy the Portnox™ Cloud local RADIUS server container using Docker on a local Linux machine (physical or virtual).

Read the following important information before you begin:

  • We assume that the Linux machine is already installed, configured, updated, and connected to the local network. This guide includes only the installation and configuration of Docker and the Portnox Cloud local RADIUS server container.

  • You cannot place NAS devices behind a NAT because the local RADIUS server uses the source IP address of the connection, and with a NAT in place, that address would be the same for several NAS devices.

Note: This procedure has been tested on Ubuntu 22.04.2 and RHEL 9.3. It applies either unmodified or with little modifications to all other popular Linux distributions.

Install docker

In this section, you will install Docker on the Linux machine.

Skip this section if Docker is already installed.

  1. Open the Terminal window.
  2. Install Docker using your distribution’s package management framework.

    Ubuntu:

    $sudo apt-get install docker.io -y

    RedHat:

    $sudo yum install -y yum-utils
    $sudo yum-config-manager --add-repo https://download.docker.com/linux/rhel/docker-ce.repo
    $sudo yum install docker-ce
    $sudo systemctl start docker
  3. Test Docker using the Hello World test container.
    $sudo docker run hello-world

    Result: Hello from Docker! This message shows that your installation appears to be working correctly.

Run the Portnox Cloud local RADIUS container

In this section, you will deploy the local RADIUS server Docker container locally to the Linux machine.

  1. Copy and paste the values of the three environment variables that you saved earlier (or copy them directly from Portnox Cloud) into three export commands.
    $sudo export RADIUS_GATEWAY_ORG_ID=copied_RADIUS_GATEWAY_ORG_ID
    $sudo export RADIUS_GATEWAY_PROFILE=copied_RADIUS_GATEWAY_PROFILE
    $sudo export RADIUS_GATEWAY_TOKEN=copied_RADIUS_GATEWAY_TOKEN
  2. Run the portnox/portnox-radius Docker container.
    $sudo docker run -d -p 1812:1812/udp -p 1813:1813 \
      --name portnox-radius --restart=on-failure \
      -e RADIUS_GATEWAY_PROFILE=$RADIUS_GATEWAY_PROFILE \
      -e RADIUS_GATEWAY_ORG_ID=$RADIUS_GATEWAY_ORG_ID \
      -e RADIUS_GATEWAY_TOKEN=$RADIUS_GATEWAY_TOKEN \
      portnox/portnox-radius:latest
  3. Optional: View the logs for the portnox/portnox-radius Docker container.
    $sudo docker logs portnox-radius -f
  4. Optional: Check if your NAS is configured correctly and if the RADIUS packets are reaching your Docker container.
    $sudo docker exec -it portnox-radius sh
    / #apk add tcpdump
    / #tcpdump -i eth0 -v port 1812

Result: Your local RADIUS server is active.

You can check its status in Portnox Cloud, in the Settings > Services > LOCAL RADIUS SERVICE section.

Ubuntu:

RedHat: