HowTO - FreeRADIUS + Omada Controller + LAN ethernet + 802.1x computer authentication with cert

[marian78]

Hi,
I have pfSense 2.8.0 CE and I want to authenticate with an 802.1x, PC connected to the LAN, via Ethernet using RadiusSERVER and cert.

I access this PC remotely via RDP, so it is necessary that the PC authenticates itself, even before the user logs in to Windows, otherwise it is not connected to the network, since authentication using a name and password occurs, only after the user logs in to Windows.

Therefore, I would like to set up RadiusSERVER and PC so that it authenticates automatically after Windows starts. Ideally using a certificate, without user interaction.

I currently have MAB (MAC authentication) running between the PC, OMADA controller and switch and pFsense with RadiusSERVER. But I would like to switch to a certificate instead of a MAC address.

Can you help me with the setup?

pfSense CE 2.8.0 as transparent firewall with BRIDGE 192.168.0.2/24
FreeRadius package freeradius3 net 0.15.14 on BRIDGE interface 192.168.0.2 UDP 1812
PC have IP 192.168.0.100/24, MAC AA-BB-CC-DD-EE-FF

Thank you.