eap configuration

[Alan DeKok]

Christian Bösch wrote:
> is it possible to define a separate eap config with each virtual server?

  Yes, but that's the wrong question.

  The EAP configuration is tied to the "eap" module.  Virtual servers
reference modules.

  So.. if you want multiple EAP configurations, you need to create
multiple "eap" modules.  You need to create multiple virtual servers,
and then reference a *unique* eap from from each virtual server.

  See "man unlang" and raddb/modules/files for some documentation and
examples.

> in detail: i want to do 802.1x on some ports with with ONLY tls certs and on other ONLY with user/password and ttls.
> but with one global eap.conf there always will be a fallback to the other eap method.
> is it possible to do something like this?

  Yes.  It's possible to do almost anything with FreeRADIUS.

  Alan DeKok.