Christoph Litauer <[EMAIL PROTECTED]> wrote:
> I want to use automativ wep key rotation using an EAP-TLS setup. My NAS 
> (Cisco AP 340) supports an option named "Broadcast WEP Key rotation 
> interval (sec)".

  I think that's different.

> Setting this value to 300 I expected that my radius 
> debug log reports new requests every 5 minutes. But I can see no 
> requests at all (except for the first EAP-TLS authentication).
> 
> I am a newbie to radius, so I wonder if I should see those 
> "rotation-requests"?

  The WEP key rotation via RADIUS is done by having the user
re-authenticate.  So you should set the "Session-Timeout" attribute in
the Access-Accept to the re-authentication interval.  The AP will drop
the user after that interval, and they will re-authenticate.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to