RE: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-05 Thread Hopeman, Ward
Hi Alan, FreeRADIUS does this in the default install, and contains EAP tests (src/tests) for all major EAP types. I actually went and re-read the RFC for PEAP. I noted that a server that supports PEAP will reply with the highest supported version and the negotiation will go from there.

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-05 Thread Alan DeKok
Hopeman, Ward wrote: This is where I got confused, I missed the foot notes that PEAPv1 was only available in the experimental build with the eap2 module. Yes. FR doesn't support PEAPv1 natively. Don't use PEAPv1. It's even less documented than PEAPv0. It's used by pretty much no

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-03 Thread Alan DeKok
whopeman wrote: I am fairly new to FreeRADIUS, so pelase bear with me a bit. I have searched the forums and websites to find an implementation that allows me to configure my server to process BOTH PEAP MSCHAP and PEAP/EAP-GTC (v0 and v1). I have not found anyone trying to do this, but I

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-02 Thread Fajar A. Nugraha
On Fri, Mar 2, 2012 at 2:10 AM, Matthew Newton m...@leicester.ac.uk wrote: Hi, On Thu, Mar 01, 2012 at 10:25:13AM -0800, whopeman wrote: I have run wireshark and grabbed the packet traces as well, when my client connects it requests PEAP as the preferred auth type but FR seems to be pushing

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-02 Thread Alan Buxey
Yep use some unlang to detect peapv1 and direct the request to eap2 module. (never used eap2 myself...though its the only way to EAP-FAST nirvana ;) ) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-02 Thread Phil Mayers
On 01/03/12 18:25, whopeman wrote: Hi, I am fairly new to FreeRADIUS, so pelase bear with me a bit. I have searched the forums and websites to find an implementation that allows me to configure my server to process BOTH PEAP MSCHAP and PEAP/EAP-GTC (v0 and v1). I have not found anyone

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-02 Thread whopeman
Hi Matthew, Thanks for the update. I do see now that it is listed as experimental. It is not very clear on that fact when looking at the wiki sites http://wiki.freeradius.org/EAP as they list it as a supported EAP type. I suppose I need to read foot notes more closely. Once I started

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-01 Thread Matthew Newton
On Thu, Mar 01, 2012 at 10:25:13AM -0800, whopeman wrote: connects it requests PEAP as the preferred auth type but FR seems to be pushing v0 as the request type and does not seem to be allowing for v1. My I was slightly wrong - the rlm_eap2 module does support it, but it's experimental and not

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-01 Thread Matthew Newton
Hi, On Thu, Mar 01, 2012 at 10:25:13AM -0800, whopeman wrote: I have run wireshark and grabbed the packet traces as well, when my client connects it requests PEAP as the preferred auth type but FR seems to be pushing v0 as the request type and does not seem to be allowing for v1. My client