Hi Torsten, I have a very similar issue with radius assigned VLAN multi-tenant building networks - so far it is only Google phones that have stopped working with our 802.1x SSID and I have to put them on a MAC auth SSID instead which used to only be used for printers and other devices not supporting 802.1X - and obviously privacy MAC has to be disabled as well. I suspect many other Android devices will probably follow suit soon. I know we could implement an onboarding system but the landlord is not going to pay for that. Paul Bone -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+paul.bone=probitas-solutions.tech@lists.freeradius.org> On Behalf Of Torsten Wilms via Freeradius-Users Sent: Thursday, June 29, 2023 4:04 PM To: Alan DeKok <aland@deployingradius.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Cc: Torsten Wilms <T.Wilms@m3connect.de> Subject: Re: 802.1x with GoDaddy Certificates EAP-TTLS That was really very nicely put. Understood. Thank you very much for your time
On Jun 29, 2023, at 10:58 AM, Torsten Wilms via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
The idea behind using a public certificate is that anyone can connect to the WLAN without a certificate error if the username and password are correct
That's a nice wish. But it's just a wish. It is entirely unrelated to the real world. If you don't like this, then please convince the standards bodies, Microsoft, Cisco, Google etc. to configure the systems the way you want, and not the way they work today. You can't magically wish functionality into existence. If the systems don't work the way you want, you either live with that limitation, or you spend years at standards bodies trying to fix it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html