How to enable only EAP-TTLS type and not EAP-TLS?

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Wed Jan 9 10:45:49 CET 2008


Hi,
> Hi,
> I want to enable only TTLS authentication and if the client is requesting
> any other types EAP-TLS or PEAP the authentication should be denied.
> I am running freeradius-1.1.6, and if try to disable EAP-TLS module the
> server itself is not starting up.
> Please let me know if there are any ways to achieve this.

as per eap.conf


remove the unwanted sections (eg peap) - all apart from TLS as you
always need for TTLS and set the 

ignore_unknown_eap_types = yes

alan



More information about the Freeradius-Users mailing list