Greetings All, I'm new to FreeRADIUS and I still don't have a good sense of who talks to who. I've attached a small PDF-format diagram of what I'm trying to accomplish and my IDEA of who talks to who. Any links or feedback would be appreciated. Cheers! Thomas
Hi,
I’m new to FreeRADIUS and I still don’t have a good sense of who talks to who. I’ve attached a small PDF-format diagram of what I’m trying to accomplish and my IDEA of who talks to who. Any links or feedback would be appreciated…
clients (eg users laptops) talk to NAS (eg wifi access point), which talk to RADIUS server, which then uses eg SQL, LDAP, AD or a flat file locally to authenticate. a client doesnt talk directly to the RADIUS server (dont forget, in eg 802.1X environment, the client isnt even on the network...its using eg EAPOL to talk over a L2 link to the access point). alan
Thanks for the clarification, Alan. Looks like a client corresponds to users' equipment (laptop in your example) OUTSIDE of my firewall. This means the NAS would be my BSD-based Pfsense gateway. I googled and found out that Pfsense supports FreeRADIUS, which answers my next question, "How do you implement NAS/FreeRADIUS communication?". I get it now. Thanks for everyone's input. I'll feedback on the Kerberos implementation... Cheers! Thomas -----Original Message----- From: freeradius-users-bounces+thomas_reeves=verizon.net@lists.freeradius.org [mailto:freeradius-users-bounces+thomas_reeves=verizon.net@lists.freeradius.org] On Behalf Of Alan Buxey Sent: Monday, July 05, 2010 1:34 PM To: FreeRadius users mailing list Subject: Re: Who Talks to Who? Hi,
Im new to FreeRADIUS and I still dont have a good sense of who talks to who. Ive attached a small PDF-format diagram of what Im trying to accomplish and my IDEA of who talks to who. Any links or feedback would be appreciated
clients (eg users laptops) talk to NAS (eg wifi access point), which talk to RADIUS server, which then uses eg SQL, LDAP, AD or a flat file locally to authenticate. a client doesnt talk directly to the RADIUS server (dont forget, in eg 802.1X environment, the client isnt even on the network...its using eg EAPOL to talk over a L2 link to the access point). alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan Buxey -
Thomas Reeves