RADIUS Consulting

Secure Authentication & Authorization with FreeRADIUS

Professional RADIUS (Remote Authentication Dial-In User Service) consulting and administration — specializing in FreeRADIUS deployment, 802.1X/WPA2-Enterprise Wi-Fi authentication, EAP-TLS/PEAP/TTLS, high availability, proxying, and integration with LDAP, Kerberos, Active Directory, and more.

Get RADIUS Expertise

Our RADIUS Consulting Services

Zwiegnet delivers enterprise-grade RADIUS solutions using FreeRADIUS — the most widely deployed and feature-rich open-source RADIUS server. We design, deploy, secure, scale, and troubleshoot RADIUS for Wi-Fi (802.1X), VPN, wired 802.1X, VoIP, and network access control (NAC) in demanding environments.

Our RADIUS expertise includes:

FreeRADIUS Installation & Configuration – Full setup on Linux (RHEL/AlmaLinux/Rocky/Ubuntu), FreeBSD, or other platforms; optimized radiusd.conf, modules, and virtual servers.
802.1X / WPA2-Enterprise Wi-Fi Authentication – Enterprise-grade wireless security with EAP-TLS (certificate), PEAP-MSCHAPv2, EAP-TTLS, and integration with Windows/macOS/Linux clients.
High Availability & Load Balancing – Multi-master replication, proxying, failover, and load-balanced RADIUS clusters with keepalived or CARP.
Integration with Directories – LDAP (OpenLDAP/389DS/AD), Kerberos (GSSAPI), Active Directory (winbind/sssd), FreeIPA/Red Hat IdM, and SQL backends (MySQL/MariaDB/PostgreSQL).
Security Hardening – TLS for EAP (certificate management), TLS-PSK, dynamic clients, CoA/DM support, rate limiting, and protection against brute-force and DoS attacks.
Certificate-Based Authentication (EAP-TLS) – Full PKI integration (Let’s Encrypt, internal CA), CRL/OCSP checking, and client certificate validation.
Accounting & Logging – Detailed accounting to SQL, file, or syslog; integration with monitoring (Prometheus/Grafana), and custom reporting.
Troubleshooting & Performance – Debug mode, radtest/radeapclient, packet capture (Wireshark), and optimization for high-concurrency environments (thousands of authentications/sec).
Migration & Modernization – Migrate from legacy RADIUS (Microsoft IAS/NPS, Cisco ACS, Radiator), upgrade old FreeRADIUS versions, and transition to modern EAP methods.

Perfect for: enterprise Wi-Fi deployments (802.1X), VPN gateways, secure network access control (NAC), VoIP authentication, educational institutions, healthcare, government, and any organization requiring strong, centralized network authentication.

Located between Madison and Milwaukee, Wisconsin since 2009 — direct access to RADIUS specialists with deep experience in FreeRADIUS and cross-platform integration (Linux, FreeBSD, macOS, Windows).

Inquire About RADIUS Consulting