Oh...duh...that makes sense. Should have considered that. I have since tested the behavior of the scenario I described, and Alan's on target. Doesn't really seem to matter which interface I enter on, or which common-name I use. Seems to work either way. thanks for the help! ----- Original Message ----- From: Kris Benson <kbenson@sd57.bc.ca> Date: Friday, August 5, 2005 5:28 pm Subject: Re: different eap/tls config for different interfaces
ragan_davis@colstate.edu wrote:
If so, is it possible to have 2 different tls sections that service the 2 different interfaces?
No. FreeRADIUS supports only 1 TLS module at a time.
What Alan forgot to mention is a solution.
If you run two copies of the Radius server, with one bound to either a different set of ports, or one to each IP, you could have separate configs. -kb -- Kris Benson, CCP, I.S.P. Technical Analyst, District Projects School District #57 (Prince George)
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html