Need help with Freeradius and 802.1X

Alan Buxey A.L.M.Buxey at lboro.ac.uk
Wed Nov 2 15:41:07 CET 2011


Hi,
> I have ntlm_auth working.  I can auth my AD users with this command:
> 
> radtest -t mschap aduser aspassword localhost 0 testing123
> 
> And it works.  
> 
> My problem is when I configure one of my Cisco switches to do 802.1x and
> authenticate with Freeradius my Windows (Windows 7 and Vista) machines fail
> to get authorized with the Windows supplicant.  I am running Freeradius in
> debug mode and have tried to trace down where it is failing on my own but
> since I have no experience in this area I am just chasing my tail.  Is it a
> problem with PEAP, EAP, TLS?  Do I need a certificate?  I just don't know
> and if I did I wouldn't know how to configure it.  I have not been able to
> find any conclusive documentation in this area.

the windows clients need the CA for your RADIUS server installed in their certificate store

alan




More information about the Freeradius-Users mailing list