.
- Original Message -
From: Alan DeKok [EMAIL PROTECTED]
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Sent: Tuesday, June 14, 2005 01:03
Subject: Re: MAC+EAP authentication
Jefri bin Dahari [EMAIL PROTECTED] wrote:
I plan to implement simultaneous MAC+EAP
Artur Hecker [EMAIL PROTECTED] wrote:
implementing EAP or MAC authentication, meaning that one of both would
work, is a huge security hole and requiring both is useless since EAP
authentication implicitly filters away everything unauthenticated...
Doing *both* ensures that known users only
Jefri bin Dahari [EMAIL PROTECTED] wrote:
authentication. On client side (Centrino/Windows XP), I set as mentioned in
the HOW-TO for EAP-TLS. On Freeradius, I only see EAP authentication but no
MAC authentication. Am I missing something? Please help.
Read your NAS documentation.
There's
Alan,
well, unfortunately not really. and most importantly: it does not
assure the users use the known SOFTware to access the net.
imho, hardware has never ever represented a problem so far.
ciao
artur
On 6/14/05, Alan DeKok [EMAIL PROTECTED] wrote:
Artur Hecker [EMAIL PROTECTED] wrote:
Hi,
I plan to implement simultaneous MAC+EAP authentication for my wireless
users. From my observation, Freeradius can only do either MAC or EAP but not
MAC and EAP authentication. Can somebody gives me some hints on how to do
that?
Thanks.
-
List info/subscribe/unsubscribe? See http
On Mon, Jun 13, 2005, Jefri bin Dahari wrote:
Hi,
I plan to implement simultaneous MAC+EAP authentication for my wireless
users. From my observation, Freeradius can only do either MAC or EAP but
not MAC and EAP authentication. Can somebody gives me some hints on how to
do that?
I check
Jefri bin Dahari [EMAIL PROTECTED] wrote:
I plan to implement simultaneous MAC+EAP authentication for my wireless
users. From my observation, Freeradius can only do either MAC or EAP but not
MAC and EAP authentication. Can somebody gives me some hints on how to do
that?
It can do both
be necessary for current WiFi phones,
etc., please be aware that under linux you can actually change the MAC
address with one command...)
ciao
artur
On 6/13/05, Alan DeKok [EMAIL PROTECTED] wrote:
Jefri bin Dahari [EMAIL PROTECTED] wrote:
I plan to implement simultaneous MAC+EAP authentication
8 matches
Mail list logo