EAP Access-Accept for all authentication requests?
Hi, I'm trying to set my server up to authenticate everyone in an 802.1x/PEAP environment without regard to the credentials they provide. Can this be done with FreeRadius? I'm on version 2.1.3. Thanks!
I'm trying to set my server up to authenticate everyone in an 802.1x/PEAP environment without regard to the credentials they provide.
And the point of doing PEAP is? If you don't want to authenticate users - then don't. Leave your ports open and let anyone connect. Ivan Kalik Kalik Informatika ISP
The default supplicant behavior in Windows XP is PEAP using the logged-in user's credentials. I use 802.1x for VLAN switching and I use other methods to identify which VLAN a machine should be in, so I don't care to validate a username/password. Can FreeRADIUS authenticate everyone in an 802.1x/PEAP environment without regard to the credentials they provide? ________________________________ From: "tnt@kalik.net" <tnt@kalik.net> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Tuesday, December 23, 2008 4:24:04 PM Subject: Re: EAP Access-Accept for all authentication requests?
I'm trying to set my server up to authenticate everyone in an 802.1x/PEAP environment without regard to the credentials they provide.
And the point of doing PEAP is? If you don't want to authenticate users - then don't. Leave your ports open and let anyone connect. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
The default supplicant behavior in Windows XP is PEAP using the logged-in user's credentials.
So? That is so *if* NAS asks for credentials. If you are using mac authentication and don't want to authenticate users - don't set your NAS to use 802.1x. You can allocate VLANs from radius on basis of mac alone (which is what you want to do).
Can FreeRADIUS authenticate everyone in an 802.1x/PEAP environment without regard to the credentials they provide?
The whole point of EAP is to prevent this. No RFC compliant radius server will do that. Ivan Kalik Kalik Informatika ISP
participants (2)
-
Raymond Carr -
tnt＠kalik.net