Hi, I'm very newbie to Freeradius. I'm try to use TLS whit to freeradius server. I've a firewall FW that talk locally (over LAN) with the freeradius A. Then freeradius A proxies the request to a remote (over WAN) freeradius B. The system works great and I'm able to authenticate user on firewall FW by freeradius B (which is the only who have the user accounts). Now to increment the security, I'm trying to use EAP-TLS or EAP-TTLS between the two freeradius server, but with no luck, infact in the logs of the main server i see: rlm_eap: No EAP-Message, not doing EAP (an so it's no doing TLS) I'm use version 1.1.3, and I've generate correctly the certificates, and configured eap.conf to use tls and ttls. What is wrong? Maybe is not possible to use TLS in proxy mode? Thanks -- Gabriele Chervatin
hi i just want to know what is the operating system u instaled free radius on?is it linux red hat? thanks On 9/5/06, Gabriele Chervatin <gabriele.chervatin@gmail.com> wrote:
Hi, I'm very newbie to Freeradius.
I'm try to use TLS whit to freeradius server.
I've a firewall FW that talk locally (over LAN) with the freeradius A. Then freeradius A proxies the request to a remote (over WAN) freeradius B. The system works great and I'm able to authenticate user on firewall FW by freeradius B (which is the only who have the user accounts).
Now to increment the security, I'm trying to use EAP-TLS or EAP-TTLS between the two freeradius server, but with no luck, infact in the logs of the main server i see:
rlm_eap: No EAP-Message, not doing EAP
(an so it's no doing TLS)
I'm use version 1.1.3, and I've generate correctly the certificates, and configured eap.conf to use tls and ttls. What is wrong? Maybe is not possible to use TLS in proxy mode?
Thanks
-- Gabriele Chervatin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Gabriele Chervatin" <gabriele.chervatin@gmail.com> wrote:
Then freeradius A proxies the request to a remote (over WAN) freeradius B. The system works great and I'm able to authenticate user on firewall FW by freeradius B (which is the only who have the user accounts).
That's pretty standard.
Now to increment the security, I'm trying to use EAP-TLS or EAP-TTLS between the two freeradius server, but with no luck,
RADIUS doesn't work that way. EAP-TLS runs inside of RADIUS, not the other way around. If you want security between the two machines, run ipsec, or some other VPN system. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
2006/9/5, Alan DeKok <aland@deployingradius.com>: Tahnks for yuor reply
RADIUS doesn't work that way. EAP-TLS runs inside of RADIUS, not the other way around.
Sorry but I'don't unterstand what yuo mean.
If you want security between the two machines, run ipsec, or some other VPN system.
Right. So TLS it'is no possibile between two proxies. Thanks. -- Gabriele Chervatin
participants (3)
-
affora deeb -
Alan DeKok -
Gabriele Chervatin