Setting PEAP Method and Inner-tunnel virtual server

Alan DeKok aland at
Wed Mar 12 15:43:50 CET 2014

Hangi Christian wrote:
> But, I tried to test all the protocols, they are working in the default
> testing. I tried to set only  EAP PEAP-MSCHAPv2 method by commenting out
> all the others EAP methods except EAP-TLS and EAP-TTLS, and setting
> default_eap_type = peap. i also changed the password from cleartext into
> somethin like this ** " testing"  User-password = "P at ssw0rd "** 

  Please don't do that.  Do:

testing	CleartextPassword = "password"

  We deprecated User-Password in the "users" file about 10 years ago.

>  But I don't know how to configure the inner-tunnel virtual server
> inside the sites-enabled in order to allow 802.1x authentication.

  You don't.  You just put a user into the "users" file, and it works.
If it doesn't work, then you've edited the default configuration, and
broken it.

  To get EAP to work, just follow my guide:

  It's a simple multi-step guide with lots of explanation and examples.
 It will ALWAYS work.

  Alan DeKok.

More information about the Freeradius-Users mailing list