Re: How to enable only EAP-TTLS type and not EAP-TLS?

Alan, I tried with the configuration you had given below, but it does not work out. Still radius server is accepting TLS method. Thanks, Nikitha On 1/9/08, Alan DeKok <aland@deployingradius.com> wrote:

nikitha george wrote:

...

Hi, I want to enable only TTLS authentication and if the client is requesting any other types EAP-TLS or PEAP the authentication should be denied. I am running freeradius-1.1.6, and if try to disable EAP-TLS module the server itself is not starting up. Please let me know if there are any ways to achieve this.

Put this at the top of the "users" file:

DEFAULT EAP-Type != EAP-TTLS, Auth-Type := Reject

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html