MAC+EAP authentication

Alan DeKok aland at ox.org
Tue Jun 14 16:55:20 CEST 2005


Artur Hecker <artur.hecker at gmail.com> wrote:
> implementing EAP or MAC authentication, meaning that one of both would
> work, is a huge security hole and requiring both is useless since EAP
> authentication implicitly filters away everything unauthenticated...

  Doing *both* ensures that known users only use known hardware to
access the net.  Sort of.

  Alan DeKok.




More information about the Freeradius-Users mailing list