eap configuration

Alan DeKok aland at deployingradius.com
Mon Apr 16 14:28:59 CEST 2012


Christian Bösch wrote:
> is it possible to define a separate eap config with each virtual server?

  Yes, but that's the wrong question.

  The EAP configuration is tied to the "eap" module.  Virtual servers
reference modules.

  So.. if you want multiple EAP configurations, you need to create
multiple "eap" modules.  You need to create multiple virtual servers,
and then reference a *unique* eap from from each virtual server.

  See "man unlang" and raddb/modules/files for some documentation and
examples.

> in detail: i want to do 802.1x on some ports with with ONLY tls certs and on other ONLY with user/password and ttls.
> but with one global eap.conf there always will be a fallback to the other eap method.
> is it possible to do something like this?

  Yes.  It's possible to do almost anything with FreeRADIUS.

  Alan DeKok.


More information about the Freeradius-Users mailing list