<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Gulim;
panose-1:2 11 6 0 0 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Malgun Gothic";
panose-1:2 11 5 3 2 0 0 2 0 4;}
@font-face
{font-family:"Malgun Gothic";
panose-1:2 11 5 3 2 0 0 2 0 4;}
@font-face
{font-family:Gulim;
panose-1:2 11 6 0 0 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
text-align:justify;
text-justify:inter-ideograph;
text-autospace:none;
word-break:break-hangul;
font-size:10.0pt;
font-family:"Malgun Gothic";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"\AE00\C790\B9CC Char";
margin:0cm;
margin-bottom:.0001pt;
text-autospace:none;
word-break:break-hangul;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"\D48D\C120 \B3C4\C6C0\B9D0 \D14D\C2A4\D2B8 Char";
margin:0cm;
margin-bottom:.0001pt;
text-align:justify;
text-justify:inter-ideograph;
text-autospace:none;
word-break:break-hangul;
font-size:9.0pt;
font-family:"Malgun Gothic";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Malgun Gothic";
color:windowtext;}
span.Char
{mso-style-name:"\AE00\C790\B9CC Char";
mso-style-priority:99;
mso-style-link:\AE00\C790\B9CC;
font-family:"Courier New";}
span.Char0
{mso-style-name:"\D48D\C120 \B3C4\C6C0\B9D0 \D14D\C2A4\D2B8 Char";
mso-style-priority:99;
mso-style-link:"\D48D\C120 \B3C4\C6C0\B9D0 \D14D\C2A4\D2B8";
font-family:"Malgun Gothic";}
.MsoChpDefault
{mso-style-type:export-only;}
/* Page Definitions */
@page Section1
{size:612.0pt 792.0pt;
margin:3.0cm 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=KO link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span lang=EN-US>Thank you very much.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Your comment and advice are very helpful to
understand Radius mechanism<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>I replaced the AP(Belkin54g) with new one(DWL-8200AP,
D-Link).<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>As a result, the delay time is reduced from
18 sec to 0.15 sec<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>I measured the time stamp the captured packet-based
on Network Monitor 3.1(M$)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>However, I’m not sure it depends on
AP’s feature or not.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>I have already installed VMware tools in
that measuring, so networking configuration is ok.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Lastly, concerned with “Looking up
realm”,<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Actually, I didn’t know very well
about this, <o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>I just use the user name like that style.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Can you explain in detail?<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Best.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>********************<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Jaejong Baek<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>02-365-7966<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>*******************<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>Message: 3<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>Date: Thu, 18 Feb 2010 10:02:22 +0000<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>From: Alan Buxey
<A.L.M.Buxey@lboro.ac.uk><o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>Subject: Re: How long it take to auth in
802.1X/WPA-enterprise?<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>To: FreeRadius users mailing list<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US> <freeradius-users@lists.freeradius.org><o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>Cc:
"freeradius-users-owner@lists.freeradius.org"<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US> <freeradius-users-owner@lists.freeradius.org><o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>Message-ID:
<20100218100222.GA11728@lboro.ac.uk><o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>Content-Type: text/plain; charset=us-ascii<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>Hi,<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>> How long it take to auth in
802.1X/WPA-enterprise?<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>depends on the system and what methods
etc...but easily under 1 second here<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>> In this simple network model, I
have tried to auth using<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>> EAP-TLS(self-certification) and it
works good.<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>> By the way, about 18 seconds are
taken to auth as follow debug logs.<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>> (confer the timestamp (1) and (2))<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>wheres the real authentication - ie
Access-Accept return packet?<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>do you have vmware tools on your ubuntu
VMware hosted system - and therefore using vmxnet driver instead of the slow
pcnet32 ? (lsmod | grep vmx)<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>turn off any non-needed modules - eg are
you ever going to use /etc/passwd for user accounts? if not, comment out the
unix module whenever it appears..<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>likewise files, expiration, logintime
etc..... make sure you are not going to be needign them though!<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>..also...<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>> Wed Feb 17 21:37:00 2010 : Info:
[suffix] Looking up realm <o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>> "xxxx.yyy.zz.vv" for
User-Name = "<a href="mailto:kkk@xxxx.yyy.zz.vv">kkk@xxxx.yyy.zz.vv</a>"<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>> Wed Feb 17 21:37:00 2010 : Info:
[suffix] No such realm "xxxx.yyy.zz.vv"<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>are you deliberately not dealing with
this realm? are you expecting it to be sent elsewhere?<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=EN-US>alan<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
</div>
</body>
</html>