Introduction

Things to mentionChild pages description:

General Information - General information about 802.1X consists of blocking all packets at the client's point of access into the network, including all broadcast packets, etc. It is possible on Wi-Fi, ethernet and other mediums.

What RADIUS/802.1X is able to provide and not and in which situations.

Architecture

Image Removed

Things to mention:

Re-auth, accounting, request from server, features supported by TP-Link NASes

Terminology: NAS, RADIUS, FreeRADIUS, Authenticator, Supplicant, Authentication server

Protocols used: EAP, MSCHAP, PEAP, TTLS, TLS

Difference between auth systems: PEAP, TTLS, TLS

RADIUS is the protocol, it can be used for many purposes and many authentication methods can be used.

Certificates

Outer and inner identity and MAC/Windows support

Inner tunnel and outer tunnel sites

authorize, authenticate, post-auth, etc. sections

clients.conf

sites-available

mods-available

Sources

Support / Knowledge places

FreeRADIUS wiki:

https://wiki.freeradius.org/

FreeRADIUS mailing list:

https://wiki.freeradius.org/guide/Users-Mailing-List

http://lists.freeradius.org/mailman/listinfo/freeradius-usersand related topics

802.1X secured wifi installation - Description and installation instructions for a solution to secure a wireless network with 802.1X