Freeradius authentication with SSL client certificates

luckydog xf luckydogxf at gmail.com
Tue Nov 27 01:23:54 CET 2018


For wifi authentication, only two method are usable,

1. EAP-TTLS( an extension of EAP), which requires Certs installed on each
terminal( PC, Andriod, etc). 2.  EAP-mschapv2( sometimes called
PEAP-MSCHAPV2).

Both of them are running inner layer of EAP,  an alias is PEAP.

Correct me if I am wrong.

On Tue, Nov 27, 2018 at 1:21 AM Matthew Newton <mcn at freeradius.org> wrote:

> On Mon, 2018-11-26 at 12:06 -0300, Tom Yard wrote:
> > Hi people, I wanto to implement a Freeradius authentication scheme,
> > using
> > server and client SSL certificates: every client that require WiFI
> > access
> > has to have a valid SSL certificate.
>
> If this is the _only_ requirement (i.e. that the client needs a cert to
> authenticate) then you just need EAP-TLS.
>
> --
> Matthew
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list