hi

as alan already explained, radius server does not do it and is not
supposed to. if ever, a radius server can only authorize some equipment
to do so or something similar. e.g. a radius-server can imply a session
expiration by setting appropriate radius attributes to response to the
user name and each correct radius client will close the session after
this time, at least if there is no renewal.

in the particular case of 802.1x and talking about the unicast key:
that's the function of your AP, not of the radius-server. 


greetings
artur



Jianping Jiang wrote:
> 
> All,
> 
> I just started using FreeRadius.
> I am using the freeradius server (along with openssl)
> on a linux PC, a cisco access point, and a wireless
> LAN client card to run 802.1x and EAP/TLS. I would
> like the radius server to do rekeying (of the unicast
> key) say every 20 minutes. I have looked in the config
> files of freeradius, but didn't find anyway to do
> this. Does anybody know how to set the server to do
> rekeying?
> 
> Thanks!
> 
> JJ
> 
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
> http://mailplus.yahoo.com
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
Artur Hecker
artur[at]hecker.info

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to