EAP in production
EAP works out of the box on a default FreeRADIUS installation. There are, however, some points to either take note of or change to suit your environment. In this section we will cover the following points:
- The importance of a proper Public Key Infrastructure (PKI)
- Configuring the
inner-tunnelvirtual server - Issues with inner and outer tunnel identities
- Disabling unused EAP methods
Public Key Infrastructure in brief
Public Key Infrastructure is used primarily for two things:
- To verify the identity of someone
- To exchange secure data over an unsecure connection
To ensure that someone is who they claim to be, we make use of a Certificate Authority (CA). A CA will issue and sign digital certificates. We can make use of a trusted third party (TTP) to issue and sign digital certificates or we can be our own CA. These certificates are bound to an identity and should only be used by that identity.
When we transact with the identity, we can verify its validity by checking with the CA if the...
