configuring client certificates

[Alan DeKok]

On Feb 16, 2020, at 9:11 AM, Home IT <homeit4all at gmail.com> wrote:
> 
> I have a Question if freeradius does support user/client certificate +
> username and password authentication meanwhile?

  FreeRADIUS supports *authentication protocols*.  Some authentication protocols like MS-CHAP don't support certificates.  Some authentication protocols like EAP-TLS don't support passwords.

 FreeRADIUS *can* do EAP-TTLS with client certificates for the TLS portion, and passwords for the TTLS portion.

> Here is a conversation from 2017:
> http://lists.freeradius.org/pipermail/freeradius-users/2017-September/088917.html
> 
> 
> I try to configure a VPN with IKEv2:
> https://forum.netgate.com/topic/150554/ikev2-certificate-eap-username-password-and-freeradius
> 
> Which i think is not supported?

  Those messages talk about the limitations of Windows, not FreeRADIUS.

  What *exactly* are you trying to do?  Which authentication protocol are you using?  What OS is trying to gain network access?

  Alan DeKok.