Freeradius authentication with SSL client certificates

Alan DeKok aland at deployingradius.com
Tue Nov 27 03:17:35 CET 2018


On Nov 26, 2018, at 7:23 PM, luckydog xf <luckydogxf at gmail.com> wrote:
> 
> For wifi authentication, only two method are usable,

  No.

> 1. EAP-TTLS( an extension of EAP), which requires Certs installed on each
> terminal( PC, Andriod, etc). 2.  EAP-mschapv2( sometimes called
> PEAP-MSCHAPV2).


  No. EAP-MSCHAPv2 is not PEAP.  PEAP is an EAP method that uses TLS *and* EAP-MSCHAPv2.

> Both of them are running inner layer of EAP,  an alias is PEAP.

  No.

> Correct me if I am wrong.

  Most of that was wrong.

  There is documentation on Wikipedia that describes EAP, and the various EAP methods.  It should help clarify this.

  Alan DeKok.




More information about the Freeradius-Users mailing list