Re: EAP-TLS and MAC Authentication

2010-05-17 Thread John Doppke
I've been told that Cisco APs won't do WPA with MAC auth in recent versions of IOS. -John - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TLS and MAC Authentication

2010-05-17 Thread Alan Buxey
Hi, I've been told that Cisco APs won't do WPA with MAC auth in recent versions of IOS. how would that have worked anyway - you need the key exchange and the right type of EAP for WPA and wireless alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: EAP-TLS and MAC Authentication

2010-05-17 Thread John McDonnell
Hi, I've been told that Cisco APs won't do WPA with MAC auth in recent versions of IOS. how would that have worked anyway - you need the key exchange and the right type of EAP for WPA and wireless alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: EAP-TLS and MAC Authentication

2010-05-17 Thread John McDonnell
how would that have worked anyway - you need the key exchange and the right type of EAP for WPA and wireless alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The only way I can think of it working was if using Cisco's local MAC list on the AP

RE: EAP-TLS and MAC Authentication

2010-05-16 Thread John McDonnell
-Original Message- John McDonnell wrote: I'm not doing any dynamic VLAN assignments over the wireless so I really don't see any need for MAC authentication and just see it as unneeded overhead. Is there any reason why I'm wrong with this assumption? It never hurts. You can do

Re: EAP-TLS and MAC Authentication

2010-05-16 Thread Alan DeKok
John McDonnell wrote: I don't know if you have any experience with the 1100 series access points from Cisco, but they have a setting called EAP and MAC authentication. I'm not sure how it is implemented, but I would imagine I should just set it to do EAP and have FR itself do the MAC check

Re: EAP-TLS and MAC Authentication

2010-05-15 Thread Alan DeKok
John McDonnell wrote: I'm not doing any dynamic VLAN assignments over the wireless so I really don't see any need for MAC authentication and just see it as unneeded overhead. Is there any reason why I'm wrong with this assumption? It never hurts. You can do *both* EAP MAC auth at the