EAP-TNC supported?

[Alan DeKok]

Martin Schneider wrote:
> - I read in wikipedia, that the spring 2008 release of FreeRadius has
> "experimental EAP-TNC" support. I couldn't find any information on the
> FreeRadius homepage or wiki, that this information is correct. Has FreeRadius
> EAP-TNC support? And "how experimental" is the EAP-TNC support?

  It's very experimental.  Some people have gotten it to work, but I
don't think it's ready for production use.

> - In case FreeRadius supports EAP-TNC, is it possible to run EAP-TNC
> "inside" a EAP-TTLS tunnel? EAP-TTLS as outer method and EAP-TNC as
> inner method?

  No.  EAP-TNC is designed to be run as an authorization method *after*
the user has been authenticated.  It *cannot* be run all by itself
inside of a TTLS tunnel.

  You can run it inside of the TTLS tunnel after another EAP method has
been executed.  You may have to edit the source code to get this to work.

  Alan DeKok.