Computer authentication

David Mitton david at mitton.com
Tue Mar 5 22:11:58 CET 2013


Quoting Jeremy Schubert <jschubert at shaw.ca>:

> Is using a device's MAC address the only way to authenticate a   
> specific machine?
> -------
> Jeremy Schubert
> www.schubertville.com
> www.schubertschool.com

No.
In a Windows Domain, one can use the system's workstation name and a  
credential created and assigned when the system is "joined" to the  
domain. ( typically with EAP-MSCHAP inside of PEAP)

Another technique is to assign unique certificates to the machine, and  
use EAP-TLS.

Dave.



More information about the Freeradius-Users mailing list