How to change EAP type and inner authentication

LUCA sfire at hotmail.it
Fri Apr 7 16:48:33 CEST 2017


I see, so it's always the supplicant to choose which one EAP method to use.
Any workaround to force the client to choose one specific method?
Thank you.

Luca


________________________________
From: Freeradius-Users <freeradius-users-bounces+sfire=hotmail.it at lists.freeradius.org> on behalf of Matthew Newton <mcn4 at leicester.ac.uk>
Sent: Friday, April 7, 2017 3:31 PM
To: FreeRadius users mailing list
Subject: Re: How to change EAP type and inner authentication

On Fri, Apr 07, 2017 at 12:03:04PM +0000, LUCA wrote:
> Sure, but should be configured also on the server side.

Of course. But you asked how you change it. As it's the client
that chooses what sort of EAP method to use, you therefore
configure it on the client.

> I just don't know how to switch to one of these methods.

As I said before, you configure it on the end user device. That
will switch the authentication to whatever you have configured.

Obviously you also have to configure FreeRADIUS for whichever
method you choose. The default install works for a wide range of
EAP methods by default. See what's in mods-enabled/eap.

But ultimately no matter how many methods you configure on
FreeRADIUS, it's the end device which chooses which one to use.

Matthew


--
Matthew Newton, Ph.D. <mcn4 at leicester.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRADIUS -- users' list info<http://www.freeradius.org/list/users.html>
www.freeradius.org
Users' List Information. The freeradius-users mailing list is for users of the FreeRADIUS server not Cistron's server! There are a few house-rules to which we'd like ...




More information about the Freeradius-Users mailing list