can peap and ttls live together?

Phil Mayers p.mayers at imperial.ac.uk
Tue Apr 29 14:45:45 CEST 2008


Sergio Belkin wrote:
> Hi,
> 
> I had been using EAP-TTLS, but I've commented in an earlier post, I
> have no luck with securew2 and Vista. So I am planning use a
> "secondary password" for radius in clear-text. But I'd want to know if
> TTLS and PEAP can live together, my current eap.conf is as follow:


Sure. We use both.

However; you may have problems forcing peap/mschap to use a different 
password than ttls/md5 - it depends what control items you're setting.

This may be easier with FR2 - you can specify that the ttls and peap 
modules dispatch inner requests to a different virtual server.



More information about the Freeradius-Users mailing list