[How To] Freeradius 2.14 (PEAP -- MSCHAP)

[Alan DeKok]

Fajar A. Nugraha wrote:
> Sorry if this is such a basic question, but what are the advantages of
> using freeradius for this purpose (PEAP/MSCHAP) compared to using
> Microsoft's IAS/NPS?

  Microsoft's IAS works well with Microsoft machines, and is well
integrated with Active Directory.  That's about the *only* reason to use
it.  It's intended to do one thing: get Microsoft machines on the net,
by authenticating via AD.

  *Anything* else is not in its list of features.

  If you want a RADIUS server with "features", use FreeRADIUS.  It is
less tightly integrated with Active Directory (but Samba helps), and
Microsoft occasionally breaks their clients so that they don't work with
3rd party RADIUS servers.

  If you compare performance, features, database integration, ease of
management, debugging, etc.  FreeRADIUS is better in every possible way.

  Alan DeKok.