EAP-SIM compliancy
Hi all, I have a question regarding EAP-SIM authentication, in the case where authentication is performed by an external AAA system. We already perform LEAP and EAP-TLS authentication against an external AAA system authentication through FreeRADIUS (FreeRADIUS acts as a proxy for EAP authentication). Regarding EAP-SIM, is FreeRADIUS compliant with the latest EAP-SIM version that became a RFC (RFC 4186), in the case where authentication is performed by an external AAA system? Thank you for you answers Geof.
hi i have a question about the encryption mode of cisco aironets. i would like to do the authentication and encryption like: WPA+TKIP with 802.1x PEAP/mschapv2 this is running, but ive clients they cant do WPA, so is it possible to do dynamic WEP with 802.1x PEAP/mschapv2 ?? thx
On 23 May 2006, at 14:05, Konne wrote:
but ive clients they cant do WPA, so is it possible to do
dynamic WEP with 802.1x PEAP/mschapv2 ??
Yes, this is a very common configuration. josh. Josh Howlett, Networking Specialist, University of Bristol. email: josh.howlett@bristol.ac.uk | phone: +44 (0)7867 907076 | interal: 7850
thx, you know perhabs where i can get a config example for cisco aironets1200? bye Konne Josh Howlett schrieb:
On 23 May 2006, at 14:05, Konne wrote:
but ive clients they cant do WPA, so is it possible to do
dynamic WEP with 802.1x PEAP/mschapv2 ??
Yes, this is a very common configuration.
josh.
Josh Howlett, Networking Specialist, University of Bristol. email: josh.howlett@bristol.ac.uk | phone: +44 (0)7867 907076 | interal: 7850
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Have you tried reading the Cisco documentation? - it's explained very clearly there. josh. On 23 May 2006, at 14:55, Konne wrote:
thx,
you know perhabs where i can get a config example for cisco aironets1200?
bye Konne
Josh Howlett schrieb:
On 23 May 2006, at 14:05, Konne wrote:
but ive clients they cant do WPA, so is it possible to do
dynamic WEP with 802.1x PEAP/mschapv2 ??
Yes, this is a very common configuration.
josh.
Josh Howlett, Networking Specialist, University of Bristol. email: josh.howlett@bristol.ac.uk | phone: +44 (0)7867 907076 | interal: 7850
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
Josh Howlett, Networking Specialist, University of Bristol. email: josh.howlett@bristol.ac.uk | phone: +44 (0)7867 907076 | interal: 7850
hi, yes, i read it. so i think ive to read it another time... :-) thx Josh Howlett schrieb:
Have you tried reading the Cisco documentation? - it's explained very clearly there.
josh.
On 23 May 2006, at 14:55, Konne wrote:
thx,
you know perhabs where i can get a config example for cisco aironets1200?
bye Konne
Josh Howlett schrieb:
On 23 May 2006, at 14:05, Konne wrote:
but ive clients they cant do WPA, so is it possible to do
dynamic WEP with 802.1x PEAP/mschapv2 ??
Yes, this is a very common configuration.
josh.
Josh Howlett, Networking Specialist, University of Bristol. email: josh.howlett@bristol.ac.uk | phone: +44 (0)7867 907076 | interal: 7850
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
Josh Howlett, Networking Specialist, University of Bristol. email: josh.howlett@bristol.ac.uk | phone: +44 (0)7867 907076 | interal: 7850
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
thx,
you know perhabs where i can get a config example for cisco aironets1200?
http://www.cisco.com/en/US/products/hw/wireless/ps430/products_configuration... http://www.cisco.com/en/US/products/hw/wireless/ps430/products_configuration... alan
On Tue, May 23, 2006 at 03:05:44PM +0200, Konne wrote:
hi
i have a question about the encryption mode of cisco aironets. i would like to do the authentication and encryption like:
WPA+TKIP with 802.1x PEAP/mschapv2 this is running,
but ive clients they cant do WPA, so is it possible to do
dynamic WEP with 802.1x PEAP/mschapv2 ??
In some APs yes. What do you have?
thx
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Nelson Murilo schrieb:
On Tue, May 23, 2006 at 03:05:44PM +0200, Konne wrote:
hi
i have a question about the encryption mode of cisco aironets. i would like to do the authentication and encryption like:
WPA+TKIP with 802.1x PEAP/mschapv2 this is running,
but ive clients they cant do WPA, so is it possible to do
dynamic WEP with 802.1x PEAP/mschapv2 ??
In some APs yes. What do you have?
cisco aironet 1242ag
thx
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Geoffroy Arnoud <geoffroy.arnoud@free.fr> wrote:
Regarding EAP-SIM, is FreeRADIUS compliant with the latest EAP-SIM version that became a RFC (RFC 4186), in the case where authentication is performed by an external AAA system?
I'm not sure what you mean by that. FreeRADIUS *is* an AAA server, and can proxy EAP-SIM (in RADIUS packets) to other RADIUS servers. FreeRADIUS can also get authentication data from a database, and do the EAP-SIM authentication itself. Alan DeKok.
participants (6)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Geoffroy Arnoud -
Josh Howlett -
Konne -
Nelson Murilo