On Mon, 2004-04-05 at 11:56, Alan Russell wrote: > Is the wep key dynamic or static? If dynamic how often is the key changed?
This depends on your NAS (AP). If the AP supports 802.1x, then it most likely supports dynamic keying through TLS-based EAP methods (EAP-TLS, EAP-TTLS, PEAP). How often the key is changed is entireley dependent on your FreeRADIUS config and/or your AP. Some APs will take the information from FreeRADIUS and generate their own keys. If your AP does this, then it likely has a "Rekey Interval" setting somewhere in its config. This interval will determine how often a new key is generated. If your AP, on the other hand, simply uses the key generated by FreeRADIUS as the WEP keying material, then the only way to generate a new key is by forcing a new authentication. This can be done in some APs by setting a "Reauthentication Interval" or, if your AP supports it, by setting the Session-Timeout and Termination-Action attributes in the Access-Accept packet. > If not dynamic is there freeradius config to generate a dynamic wep key? It handles this automatically as part of any TLS-based EAP exchange. -- --Mike ----------------------------------- Michael Griego Wireless LAN Project Manager The University of Texas at Dallas - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
