>Ok, we assume my certificates are corrects. > >So i have some more questions: > > >- Certificate should be import for user accounts or for computer account ?
Who/what ever is you supplicant trying to authenticate. If the supplicant can't find the correct certificate it will give up. > >- i use the file "users" as database for my accounts; when using eap-tls >when trying eap-peap my accounts looks like that: > >>> johndoe Auth-Type: = EAP, User-Password == �test1234" >>> Tunnel-Type = 13, >>> Tunnel-Medium-Type = 6, > >or >>> johndoe User-Password == �test1234" >>> Tunnel-Type = 13, >>> Tunnel-Medium-Type = 6, No, don't use Auth-Type. Use Cleartext-Password or NT-Password (names clearly suugest are they encrypted and how) with mschap. > > >- when i use eap-tls, it looks like that: > >>> johndoe >>> Tunnel-Type = 13, >>> Tunnel-Medium-Type = 6, >----- > >and sometimes, i add add the assignment of Vlan by using the attribute ' Tunnel-Private-Group-ID = 100" -vlan 100 is affected to the ssid i am interested in- > >is it correct? It will work, but it's more common to use "human" values (VLAN and IEEE-802). Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html