Help needed with freeradius, solaris and trapeze

Alan DeKok aland at deployingradius.com
Tue Apr 29 09:54:08 CEST 2008


Guy Davies wrote:
> Erm... I'm using WPA2/AES that uses 802.1x to authenticate the user

  Hmm... tI thought the "WPA enterprise" did that...  Too many
standards, I guess.

> You need to tell us which EAP method you plan to use.  If you are
> using local users, you can take your pick from EAP-TTLS/PAP or
> PEAP/MS-CHAPv2.  If you use the former, you can have the passwords
> encrypted in the users file.  If you use the latter, the passwords
> must be in clear text.
> 
> I believe that the default radius.conf and eap.conf files will work
> automatically for either option.

  In 2.0, yes.

> Trapeze uses some VSAs to specify which VLAN a user should be
> connected to, what time-of-day they can connect, etc.  Just look in
> dictionary.trapeze and you'll see the options.  The Trapeze
> documentation was always pretty good at explaining the purpose and
> format of those VSAs.  You *MUST* include a VLAN-Name VSA when
> responding to a Trapeze unit or it won't connect you to the correct
> VLAN.

  Ah, yes.  *That* vendor.

  Alan DeKok.



More information about the Freeradius-Users mailing list