jbibe
Premium,MVM
join:2001-02-22
| reply to Jason Cohen
Re: Questions about WPA2 and WPA
Be careful with my original writeup. FreeRADIUS has been modified so that some of the information is outdated. For example, a portion of the radiusd.conf file has been extracted and placed in the eap.conf file.
For more information about building a FreeRADIUS server look at the following document which provides information about building a server for PEAP authentication:
»www.tldp.org/HOWTO/html_single/8021X-HOWTO/
Most of the recent Linux releases include a prepackaged FreeRADIUS server that can be installed with little or no trouble. The major tasks are configuring the server, and producing and installing the the required certificates.
Other members here use a FreeRADIUS server for authentication. If you get stuck, ask your question here or on the freeradius.org mail list.
I use WPA2 with a FreeRADIUS server. The server is normally configured for TLS. |
|
Jason Cohen
join:2004-11-06
Waltham, MA
1 edit | reply to jbibe
If that's the case, I think I will setup FreeRadius with EAP-TLS on my Debian server using the instructions you provide here: »FreeRADIUS/WinXP Authentication Setup
EAP-TLS is the most secure EAP mode, correct? I would think it is as it uses server and client certificates, nullifying the problem of weak passwords, and allowing bidirectional authentication. |
|
