Freeradius authentication with SSL client certificates

Alan DeKok aland at
Tue Nov 27 03:17:35 CET 2018

On Nov 26, 2018, at 7:23 PM, luckydog xf <luckydogxf at> wrote:
> For wifi authentication, only two method are usable,


> 1. EAP-TTLS( an extension of EAP), which requires Certs installed on each
> terminal( PC, Andriod, etc). 2.  EAP-mschapv2( sometimes called

  No. EAP-MSCHAPv2 is not PEAP.  PEAP is an EAP method that uses TLS *and* EAP-MSCHAPv2.

> Both of them are running inner layer of EAP,  an alias is PEAP.


> Correct me if I am wrong.

  Most of that was wrong.

  There is documentation on Wikipedia that describes EAP, and the various EAP methods.  It should help clarify this.

  Alan DeKok.

More information about the Freeradius-Users mailing list