[How To] Freeradius 2.14 (PEAP -- MSCHAP)

Alan DeKok aland at deployingradius.com
Wed Mar 11 11:36:54 CET 2009


Fajar A. Nugraha wrote:
> Sorry if this is such a basic question, but what are the advantages of
> using freeradius for this purpose (PEAP/MSCHAP) compared to using
> Microsoft's IAS/NPS?

  Microsoft's IAS works well with Microsoft machines, and is well
integrated with Active Directory.  That's about the *only* reason to use
it.  It's intended to do one thing: get Microsoft machines on the net,
by authenticating via AD.

  *Anything* else is not in its list of features.

  If you want a RADIUS server with "features", use FreeRADIUS.  It is
less tightly integrated with Active Directory (but Samba helps), and
Microsoft occasionally breaks their clients so that they don't work with
3rd party RADIUS servers.

  If you compare performance, features, database integration, ease of
management, debugging, etc.  FreeRADIUS is better in every possible way.

  Alan DeKok.



More information about the Freeradius-Users mailing list