Would you like to learn how to configure the Radius authentication on the TP-LINK ARCHER C20 AC750? In this tutorial, we are going to show you how to configure the AC750 router to authenticate users using the Radius protocol.

• TP-LINK ARCHER C20 AC750 – Version 5.0
• Ubuntu 20.04
• Freeradius 3.0.20

The Radius server will be the Freeradius service installed on a computer running Ubuntu Linux.

In our example, the Radius server IP address is 192.168.0.200.

In our example, the AC750 IP address is 192.168.0.1.

Equipment list

Here you can find the list of equipment used to create this tutorial.

This link will also show the software list used to create this tutorial.

Tutorial – FreeRadius Server Installation on Ubuntu Linux

• IP – 192.168.0.200
• Operacional System – Ubuntu 20
• Hostname – FREERADIUS

On the Linux console, use the following commands to install the FreeRadius service.

Copy to Clipboard

Now, we need to add FreeRadius clients to the clients.conf;.

Locate and edit the clients.conf.

Copy to Clipboard

Add the following lines at the end of the clients.conf file.

Copy to Clipboard

In our example, we are adding 1 client device:

The device was named AC750 and has the IP address 192.168.0.1.

The secret configured to perform the device authentication was KAMISAMA123.

Now, we need to add FreeRadius users to the USERS configuration file.

Locate and edit the Freeradius users configuration file.

Copy to Clipboard

Add the following lines at the end of the file

Copy to Clipboard

In our example, we are adding 2 user accounts.

The first user account was named USER01.

The second user account was named USER02.

Restart the Freeradius server.

Copy to Clipboard

Test your radius server configuration file.

Copy to Clipboard

You have finished the Freeradius installation on Ubuntu Linux.

Freeradius – Authentication test

Test your radius authentication locally using the following commands:

Copy to Clipboard

Here is the command output:

Copy to Clipboard

As you can see, the account was able to successfully authenticate on the Radius server.

Test the user account named USER02.

Copy to Clipboard

Here is the command output:

Copy to Clipboard

As you can see, the account was able to successfully authenticate on the Radius server.

Archer C6 AC750 – Radius authentication

Open your browser and enter the IP address of your wireless router.

In our example, the following URL was entered in the Browser:

• http://192.168.0.1

The AC750 web interface should be presented.

On the login screen, enter the management password.

ARCHER C20 LOGIN SCREEN

Access the Advanced tab on the top of the screen.

ARCHER C6 - Advanced menu

Access the WIRELESS menu and select the WIRELESS SETTINGS option.

ARCHER C6 - Wireless menu

On the Wireless settings screen, perform the following configuration:

• Enable Wireless Radio – Yes.
• Network name – Enter the desired SSID name.
• Security – WPA2-Enterprise.
• Version – WPA2-PSK.
• Encryption – AES.
• Radius server IP – The IP address of the Radius server.
• Radius port – 1812.
• Radius password – The device secret configured on the Radius server.

Click on the Save button.

Archer C6 AC1200 - Radius authentication

Try to connect a device to the new wireless network.

Use the username and password configured on the Radius server.

In our example, we were able to authenticate using the following credentials.

Copy to Clipboard

Congratulations, you have configured the Radius authentication on the AC750 router.