Re: How to enable only EAP-TTLS type and not EAP-TLS?

["nikitha george" <nikitha.george@gmail.com>]

Alan,
 I tried with the configuration you had given below, but it does not work out. Still radius server is accepting TLS method.

Thanks,
Nikitha

On 1/9/08, Alan DeKok <aland@deployingradius.com> wrote:

nikitha george wrote:
> Hi,
> I want to enable only TTLS authentication and if the client is
> requesting any other types EAP-TLS or PEAP the authentication should be
> denied.
> I am running freeradius-1.1.6, and if try to disable EAP-TLS module the
> server itself is not starting up.
> Please let me know if there are any ways to achieve this.

  Put this at the top of the "users" file:

DEFAULT EAP-Type != EAP-TTLS, Auth-Type := Reject

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html