EAP Question

Phil Mayers p.mayers at imperial.ac.uk
Mon Nov 18 18:00:30 CET 2013

On 18/11/13 16:42, Russell Mike wrote:
> Dear List
> Please forgive me if my question is not good but i tried my best.
> IEEE 802.1X and EAP The IEEE 802.1X protocol provides access control in
> OSI Layer 2 (the MAC Layer).  IEEE.802.1X supports the authentication of

Sort of. The OSI model only maps partly to modern Ethernet/IP networks.

> clients while establishing a connection to the network before the client
> is assigned as IP address via DHCP ( Dynamic Host Configuration
> Protocol) Among other things. i am using CoovaChilli with FR and i need
> to authenticate users before ip address & VLAN is assigned. i wish to
> check if Freeradius EAP would work this way.

Yes. EAP works before IP is up, so you can select VLAN (and thus IP 
range) as part of the EAP post-auth.

More information about the Freeradius-Users mailing list