Dear List Please forgive me if my question is not good but i tried my best. IEEE 802.1X and EAP The IEEE 802.1X protocol provides access control in OSI Layer 2 (the MAC Layer). IEEE.802.1X supports the authentication of clients while establishing a connection to the network before the client is assigned as IP address via DHCP ( Dynamic Host Configuration Protocol) Among other things. i am using CoovaChilli with FR and i need to authenticate users before ip address & VLAN is assigned. i wish to check if Freeradius EAP would work this way. Thanks / Regards RM--
On 18 Nov 2013, at 16:42, Russell Mike <radius.sir@gmail.com> wrote:
Dear List
Please forgive me if my question is not good but i tried my best.
IEEE 802.1X and EAP The IEEE 802.1X protocol provides access control in OSI Layer 2 (the MAC Layer). IEEE.802.1X supports the authentication of clients while establishing a connection to the network before the client is assigned as IP address via DHCP ( Dynamic Host Configuration Protocol) Among other things. i am using CoovaChilli with FR and i need to authenticate users before ip address & VLAN is assigned. i wish to check if Freeradius EAP would work this way.
Yes. If you enable WPA/2-Enterprise it'll work exactly like that. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
Thanks Aran. Very Much Grateful !!! On Mon, Nov 18, 2013 at 4:54 PM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 18 Nov 2013, at 16:42, Russell Mike <radius.sir@gmail.com> wrote:
Dear List
Please forgive me if my question is not good but i tried my best.
IEEE 802.1X and EAP The IEEE 802.1X protocol provides access control in OSI Layer 2 (the MAC Layer). IEEE.802.1X supports the authentication of clients while establishing a connection to the network before the client is assigned as IP address via DHCP ( Dynamic Host Configuration Protocol) Among other things. i am using CoovaChilli with FR and i need to authenticate users before ip address & VLAN is assigned. i wish to check if Freeradius EAP would work this way.
Yes.
If you enable WPA/2-Enterprise it'll work exactly like that.
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 18/11/13 16:42, Russell Mike wrote:
Dear List
Please forgive me if my question is not good but i tried my best.
IEEE 802.1X and EAP The IEEE 802.1X protocol provides access control in OSI Layer 2 (the MAC Layer). IEEE.802.1X supports the authentication of
Sort of. The OSI model only maps partly to modern Ethernet/IP networks.
clients while establishing a connection to the network before the client is assigned as IP address via DHCP ( Dynamic Host Configuration Protocol) Among other things. i am using CoovaChilli with FR and i need to authenticate users before ip address & VLAN is assigned. i wish to check if Freeradius EAP would work this way.
Yes. EAP works before IP is up, so you can select VLAN (and thus IP range) as part of the EAP post-auth.
Thanks Dear Phil Mayers. Appreciated your help !!! On Mon, Nov 18, 2013 at 5:00 PM, Phil Mayers <p.mayers@imperial.ac.uk>wrote:
On 18/11/13 16:42, Russell Mike wrote:
Dear List
Please forgive me if my question is not good but i tried my best.
IEEE 802.1X and EAP The IEEE 802.1X protocol provides access control in OSI Layer 2 (the MAC Layer). IEEE.802.1X supports the authentication of
Sort of. The OSI model only maps partly to modern Ethernet/IP networks.
clients while establishing a connection to the network before the client
is assigned as IP address via DHCP ( Dynamic Host Configuration Protocol) Among other things. i am using CoovaChilli with FR and i need to authenticate users before ip address & VLAN is assigned. i wish to check if Freeradius EAP would work this way.
Yes. EAP works before IP is up, so you can select VLAN (and thus IP range) as part of the EAP post-auth.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
participants (3)
-
Arran Cudbard-Bell -
Phil Mayers -
Russell Mike