Fajar A. Nugraha wrote:
Sorry if this is such a basic question, but what are the advantages of using freeradius for this purpose (PEAP/MSCHAP) compared to using Microsoft's IAS/NPS?
Microsoft's IAS works well with Microsoft machines, and is well integrated with Active Directory. That's about the *only* reason to use it. It's intended to do one thing: get Microsoft machines on the net, by authenticating via AD. *Anything* else is not in its list of features. If you want a RADIUS server with "features", use FreeRADIUS. It is less tightly integrated with Active Directory (but Samba helps), and Microsoft occasionally breaks their clients so that they don't work with 3rd party RADIUS servers. If you compare performance, features, database integration, ease of management, debugging, etc. FreeRADIUS is better in every possible way. Alan DeKok.