basic handling of multiple EAP-Methods by freerad

Rainer Brinkmann brinkman at uke.uni-hamburg.de
Tue Jun 27 07:52:56 CEST 2006


Hello,

we wonder, how a freeradius can request a client to use a fixed EAP-Method:
so its defined:
Client starts with EAP-Start-Msg
Radius wants EAP-Identity
Client answers with Username or Hostname NOT using a special EAP-Method

Radius now starts communiucating with the first EAP-Packet, using the
special EAP-Method

Question:

you run in your wireless LAN many SSIDs:
SSID1 shall use EAP-TTLS
SSID2 shall use EAP-TLS    (high-secured Net like personal Data)

what logic starts the right inner-EAP-Protocol, cause neither the
AccessPoint(WLAN-Controller), nor the
radius server know, what Method to use, when there are many enabled.

e.g. on a cisco-Radius, that runs with enabled PEAP and TLS, but there's no
special attribute defined to control that


thanks for reply,
Rainer Brinkmann

University-Clinicum Hamburg / Germany






More information about the Freeradius-Users mailing list