Statistics on EAP methods widely used

alan buxey A.L.M.Buxey at lboro.ac.uk
Tue Nov 20 19:10:08 CET 2012


Hi,

> At first you said that 99.9% is PEAP and practise says that 75% is PEAP (even in just 4

bzzzzt! thats where you are wrong ;-) you've got to take into account
what the packet counts are measuring and whether these are unique clients.
all it takes is a chatty couple of clients and your stats are skewed...for example,
a client using EAP-TTLS that is continually reauthing will change the balance ..and
EAP-TTLS takes a couple more packets to contruct the tunnel so will therefore
have higher packet presence. 

we can , for example, see what methods sites use for their monitoring of service
but that isnt indicative of all the methods that they use....and locally they might
use some other method for their local 802.1X - eg EAP-TLS

eg 102 organisation use a PEAP test account, 10 organisations use EAP-TTLS (with various
inner types).....

I guess the real questin is WHY are you asking this - for a comp sci research project
or for eg local administrative work?

alan


More information about the Freeradius-Users mailing list