• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

PfSense wireless authentication (802.1x) with external Radius server, possible?

Scheduled Pinned Locked Moved Wireless
2 Posts 2 Posters 6.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K
    KiFFuSeR
    last edited by Jul 10, 2009, 3:28 AM Jul 9, 2009, 8:41 PM

    We are trying to setup FX5620-G with Winstron CM9 as an access point with 802.1x authentication against an external Radius server (freeradius).

    There are no options in the web interface to configure it this way, we've found this topic regarding a possible solution: http://forum.pfsense.org/index.php/topic,974.0.html however we were not able to make this work. Does anyone have a solution that makes pfSense to act as an access point with 802.1x authentication?

    Thanks in advance

    1 Reply Last reply Reply Quote 0
    • L
      lorde85
      last edited by Jul 17, 2009, 6:28 PM

      Does anyone have a clue on this?

      Manually editing hostapd.conf didn't work out, maybe we're missing some options on the file…i think that these settings should be enough (plz correct me if i'm wrong), obviously with custom settings:

      ##### RADIUS client configuration #############################################
      
      # The own IP address of the access point (used as NAS-IP-Address)
      own_ip_addr=127.0.0.1
      
      # Optional NAS-Identifier string for RADIUS messages. When used, this should be
      # a unique to the NAS within the scope of the RADIUS server. For example, a
      # fully qualified domain name can be used here.
      nas_identifier=ap.example.com
      
      # RADIUS authentication server
      auth_server_addr=127.0.0.1
      auth_server_port=1812
      auth_server_shared_secret=secret
      
      # RADIUS accounting server
      acct_server_addr=127.0.0.1
      acct_server_port=1813
      acct_server_shared_secret=secret
      
      

      If these changes worked, they wouldn't be permanent…like said in the linked post, for that we should hardcode /etc/inc/interfaces.inc...what are the var $config["wireless"]["…"] settings to configure the ieee802.1x configs?

      Some advice would be appreciated…Thanks in advance!

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received