1. Linux platform Installation
This section describes how to install Linux and the components needed for NAC.
The steps involved in preparing the Linux servers are:
- Install Linux
- Install additional key components: such as PHP, MySQL etc.
- Install optional components: for 802.1x support Samba and FreeRadius are also needed.
- Harden: disable unneeded services.
- Configure linux: configure email, syslog, time synchronisation, DNS, shell profile, system monitoring scripts
Once Linux is installed, the FreeNAC software needs to be installed, and the Linux components & FreeNAC configured.
The exact name of required packages is distribution specific. The following is the required package list for FreeNAC, extracted from the Ubuntu package. Look for the equivalencies to those packages according to your distribution.
libwrap0, apache2, mysql-client-5.0, libapache2-mod-php5, apache2.2-common, apache2-utils, php5-common, ucf, libaprutil1, php5-mysql, libdbi-perl, libmysqlclient15off, libplrpc-perl, mysql-server, libdbd-mysql-perl, mysql-server-5.0, libnet-daemon-perl, libapr1, libexpat1, libxml2, libpcre3, libpq5, apache2-mpm-prefork, mysql-common, flex, python-dev, apt-file, libsnmp-base, libsnmp9-dev, mailx, nmap, openssh-server, zip, unzip, ncurses-dev, libfreetype6-dev, libjpeg-dev, libpng12-dev, apache2-prefork-dev, php-pear, php5-snmp, libxml2-dev, graphviz, subversion, php5-sybase
Basically you need LAMP, some graphics libraries for the Web GUI and SNMP.
For 802.1x support Samba and Freeradius is needed.
For connections to MS-SQL DBs, such as ePO or Wsus, FreeTDS is needed.