I'm new to RADIUS, too...and I'm trying do get this work the same way. I set up a WLAN and a RADIUS Server with a MySQL Database and a user authentication by username and password. I want to use PEAP (MSCHAPv2) and I read about a server certificate to install on my client computer to get it work? Of course, I could be wrong ;). But when I just do this: "Simplest thing for your users with Win XP/Vista would be PEAP. Setup is the same for wired and wireless. Connection/Properties/click on Authentication tab/tick enable 802.1x box/select PEAP from the box/click on Properties button/" and use MSCHAPv2 on configure button it does not work. So I tried to create a certificate and import it - still doesn't work - think the cause is me and my missing experience with Radius. ;) What do you think? -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Im Auftrag von tnt@kalik.co.yu Gesendet: Mittwoch, 31. Oktober 2007 04:45 An: FreeRadius users mailing list Betreff: Re: Basic usage: What do I do next to get this to work? PS. Time to go to bed. Clear the "Automatically use Windows logon blah, blah" box. Confirm everything and you are done. Ivan Kalik Kalik Informatika ISP Dana 31/10/2007, "Doc. Caliban" <doc.caliban@gmail.com> piše:
tnt@kalik.co.yu wrote:
Hm, don't know much about IPCop but I would have some doubts about it authenticating wired users on a local network.
IPCop is actually pretty good for this as it uses one of it's interfaces for wireless access based on granting each node specific access by MAC, but it can be any network node, it doesn't have to be a wireless device.
All of our public workstations are on this interface so the machines are verified at the proxy. Now I just need to get the RADIUS piece in place to validate the users. IPCop can require RADIUS authentication on top of the MAC filter. It sounds good on paper, I just need to find the easiest way possible for my users to deal with the RADIUS piece of the model.
You are on the right track with wireless.
That's good to hear. Again, I just need to find the simplest implementation possible for starters.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html