802.1x with GoDaddy Certificates EAP-TTLS

[Torsten Wilms]

Hi Paul and Alan,
Many many thanks for your answers.
BR. Torsten!


Hi Torsten,

I have a very similar issue with radius assigned VLAN multi-tenant building networks - so far it is only Google phones that have stopped working with our 802.1x SSID and I have to put them on a MAC auth SSID instead which used to only be used for printers and other devices not supporting 802.1X - and obviously privacy MAC has to be disabled as well.

I suspect many other Android devices will probably follow suit soon.

I know we could implement an onboarding system but the landlord is not going to pay for that.

Paul Bone


-----Original Message-----
From: Freeradius-Users <freeradius-users-bounces+paul.bone=probitas-solutions.tech at lists.freeradius.org> On Behalf Of Torsten Wilms via Freeradius-Users
Sent: Thursday, June 29, 2023 4:04 PM
To: Alan DeKok <aland at deployingradius.com>; FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Cc: Torsten Wilms <T.Wilms at m3connect.de>
Subject: Re: 802.1x with GoDaddy Certificates EAP-TTLS

That was really very nicely put. Understood. Thank you very much for your time


> On Jun 29, 2023, at 10:58 AM, Torsten Wilms via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
>
> The idea behind using a public certificate is that anyone can connect to the WLAN without a certificate error if the username and password are correct

  That's a nice wish.  But it's just a wish. It is entirely unrelated to the real world.

  If you don't like this, then please convince the standards bodies, Microsoft, Cisco, Google etc. to configure the systems the way you want, and not the way they work today.

  You can't magically wish functionality into existence.  If the systems don't work the way you want, you either live with that limitation, or you spend years at standards bodies trying to fix it.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html