802.1X Port-Based Authentication HOWTO by Lars Strand

author: Lars Strand

published: 2004

language: English

wordcount: 9,159 / 31 pg

Table of Contents

1. Introduction

1.1. What is 802.1X?

1.2. What is 802.11i?

1.3. What is EAP?

1.4. EAP authentication methods

1.5. What is RADIUS?

2. Obtaining Certificates

3. Authentication Server: Setting up FreeRADIUS

3.1. Installing FreeRADIUS

3.2. Configuring FreeRADIUS

4. Supplicant: Setting up Xsupplicant

4.1. Installing Xsupplicant

4.2. Configuring Xsupplicant

5. Authenticator: Setting up the Authenticator (Access Point)

5.1. Access Point

5.2. Linux Authenticator

6. Testbed

6.1. Testcase

6.2. Running some tests

7. Note about driver support and Xsupplicant

8. FAQ

9. Useful Resources

10. Copyright, acknowledgments and miscellaneous

10.1. Copyright and License

10.2. How this document was produced

10.3. Feedback

10.4. Acknowledgments

A. GNU Free Documentation License

A.1. PREAMBLE

A.2. APPLICABILITY AND DEFINITIONS

A.3. VERBATIM COPYING

A.4. COPYING IN QUANTITY

A.5. MODIFICATIONS

A.6. COMBINING DOCUMENTS

A.7. COLLECTIONS OF DOCUMENTS

A.8. AGGREGATION WITH INDEPENDENT WORKS

A.9. TRANSLATION

A.10. TERMINATION

A.11. FUTURE REVISIONS OF THIS LICENSE

A.12. ADDENDUM: How to use this License for your documents

2. Configure, make and install: # ./configure # make # make install You can pass options to configure. Use ./configure --help or read the README file, for more information.

The binaries are installed in /usr/local/bin and /usr/local/sbin. The configuration files are found under /usr/local/etc/raddb.

If something went wrong, check the INSTALL and README included with the source. The [http://www.freeradius.org/faq/] RADIUS FAQ also contains valuable information.

-----

3.2. Configuring FreeRADIUS

FreeRADIUS has a big and mighty configuration file. It's so big, it has been split into several smaller files that are just "included" into the main radius.conf file.

There is numerous ways of using and setting up FreeRADIUS to do what you want: i.e., fetch user information from LDAP, SQL, PDC, Kerberos, etc. In this document, user information from a plain text file, users, is used.

Tip The configuration

802.1X Port-Based Authentication HOWTO (pdf)

802.1X Port-Based Authentication HOWTO(epub)