Is using a device's MAC address the only way to authenticate a specific machine? ------- Jeremy Schubert www.schubertville.com www.schubertschool.com
Quoting Jeremy Schubert <jschubert@shaw.ca>:
Is using a device's MAC address the only way to authenticate a specific machine? ------- Jeremy Schubert www.schubertville.com www.schubertschool.com
No. In a Windows Domain, one can use the system's workstation name and a credential created and assigned when the system is "joined" to the domain. ( typically with EAP-MSCHAP inside of PEAP) Another technique is to assign unique certificates to the machine, and use EAP-TLS. Dave.
On 2013-03-05, at 1:14 PM, David Mitton <david@mitton.com> wrote:
Quoting Jeremy Schubert <jschubert@shaw.ca>:
Is using a device's MAC address the only way to authenticate a specific machine? ------- Jeremy Schubert www.schubertville.com www.schubertschool.com
No. In a Windows Domain, one can use the system's workstation name and a credential created and assigned when the system is "joined" to the domain. ( typically with EAP-MSCHAP inside of PEAP)
Another technique is to assign unique certificates to the machine, and use EAP-TLS.
Dave.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks Dave. Can I give a certificate to a non windows machine as you suggest in your second paragraph?
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
David Mitton -
Jeremy Schubert