Can do EAP/TLS, but not EAP/MD5

[Jefri bin Dahari]

Hi,


Please help.

rad_recv: Access-Request packet from host 10.2.10.105:1812, id=6, length=98
       NAS-IP-Address = 10.2.10.105
       NAS-Port-Type = Async
       User-Name = "jeff"
       Service-Type = Framed-User
       Framed-MTU = 1500
       Calling-Station-Id = "00-02-3f-09-9c-85"
       EAP-Message = 0x02010009016a656666
       Message-Authenticator = 0xe96f3ad76059ff4bd380744026f8446e
 Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
 modcall[authorize]: module "preprocess" returns ok for request 0
 modcall[authorize]: module "chap" returns noop for request 0
 modcall[authorize]: module "mschap" returns noop for request 0
   rlm_realm: No '@' in User-Name = "jeff", looking up realm NULL
   rlm_realm: No such realm "NULL"
 modcall[authorize]: module "suffix" returns noop for request 0
 rlm_eap: EAP packet type response id 1 length 9
 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
 modcall[authorize]: module "eap" returns updated for request 0
   users: Matched entry jeff at line 6
 modcall[authorize]: module "files" returns ok for request 0
modcall: group authorize returns updated for request 0
 rad_check_password:  Found Auth-Type Local
auth: type Local
auth: No User-Password or CHAP-Password attribute in the request
auth: Failed to validate the user.

I have Freeradius running where wireless users authenticate using EAP/TLS. Now, I would like to use the same server to authenticate wired users using EAP/MD5 on Cisco switch 3750 but it doesn't work. The log shows it doesn't do EAP authentication as shown below. Attached is my eap.conf.

eap.conf
Description: Binary data

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html