Wireless 802.1x with MAB as fallback and FreeRadius

[Alan DeKok]

On Jul 17, 2025, at 10:48 AM, Rodrigo Antunes <rodrigoaantunes at yahoo.com.br> wrote:
> But whats the best practice in general? 
>
> The wireless controller send the MAC as the user and the PSK as the password to freeradius?

  I have no idea how your AP does MAC auth without 802.1X on an SSID which is configured for 802.1X.

  As I've said, go read the AP documentation.  I don't run your APs.  I am not your AP vendor.  I can't answer this question.

  Is that finally clear?

>> There's already documentation on MAB and EAP.  Follow that.
> 
> I have searched in here and didn't found mention for MAB
> 
> https://www.freeradius.org/documentation/freeradius-server/3.2.8/
> 
> And in here, anything I put in the search returns me a 404.
> 
> https://wiki.freeradius.org/

  We turned off most of the Wiki due to spam and abuse.  But a simple google search yields this page from the Wiki:

https://wiki.freeradius.org/guide/Mac-Auth
 
 Alan DeKok.