EAP in production

EAP works out of the box on a default FreeRADIUS installation. There are, however, some points to either take note of or change to suit your environment. In this section we will cover the following points:

  • The importance of a proper Public Key Infrastructure (PKI)
  • Configuring the inner-tunnel virtual server
  • Issues with inner and outer tunnel identities
  • Disabling unused EAP methods

Public Key Infrastructure in brief

Public Key Infrastructure is used primarily for two things:

  • To verify the identity of someone
  • To exchange secure data over an unsecure connection

To ensure that someone is who they claim to be, we make use of a Certificate Authority (CA). A CA will issue and sign digital certificates. We can make use of a trusted third party ...

Get FreeRADIUS Beginner's Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.