Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [wpa2-eap]

The tag has no usage guidance.

0
votes
0answers
38 views

How would one register a devices MAC Address to a WPA2 enterprise wifi? [closed]

I am studying abroad and trying to communicate with my tech support to get my device registered on the university wifi, but they do not really listen to what I have to say (either because they do not ...
0
votes
1answer
54 views

How DHCP client can determine that 802.1x Port based authentication has been completed and its time to trigger DHCP discover

I have a Supplicant running on 1 Linux box attached with a Free radius server on other linux box with cisco catalyst switch (with 802.1x Port based access) in between. Now I have been able to ...
2
votes
0answers
116 views

WPA2-Enterprise / EAP-TLS user identity

I'm currently in process of testing EAP-TLS before deploying it in production. My test setup consists of: Supplicants: Android 6, Debian Buster with WICD-GTK. Authenticator: Mikrotik RouterOS 6.43 (...
1
vote
1answer
33 views

How WPA supplicant can determine whether switch supports authentication or not?

If a client(supplicant) configure to perform EAP-TLS authentication connects with a switch which doesn't requires authentication. How can supplicant determine that authentication is not required and ...
0
votes
1answer
39 views

How does Authenticator gets the PMK which is used to calculate PTK?

I am trying to setup a Supplicant- authenticator and AAA server to perform EAPOL mechanism. I am able to successfully completed the EAP authentication procedure but 4-way handshake was not initiated ...
2
votes
1answer
48 views

Does EAP exist as an independent authentication protocol, or just as a framework?

Does EAP exist as an authentication protocol itself, or will it only be found implemented as one of its methods (EAP-TLS, EAP-TTLS, etc)? If EAP is only a framework, what additional detail do its ...
26
votes
1answer
6k views

What is stronger - WPA2 Enterprise with 2048 bit key, or Personal with 63 character passphrase?

Which of the two following has a stronger cryptographic strength in withstanding brute-force attacks? WPA/WPA2 Enterprise using 2048-bit RSA public-key WPA/WPA2 Personal using 63-character ...
0
votes
2answers
291 views

How to prevent users sharing WPA RADIUS keys?

My office LAN does not have a Windows Active Directory. The Wifi use WPA with a pre-shared key, which means that everyone in the world knows what the key is. I was thinking of implementing a RADIUS ...
1
vote
1answer
175 views

How dangerous is it to trust an “Example Server Certificate”?

When connecting to the Wi-Fi of my university, which authenticates clients via “EAP-PEAP (MSCHAPv2)”, I got the following prompt: I had no choice but to trust this certificate, because otherwise I ...
0
votes
1answer
187 views

Hotspot SSL issues, MtTM like exceptions

I have doubt about how to implement hotspot for my startup. Idea is to have implemented WPA2-Enterprise with remote radius server and splash page. This implementation came after the reason of ease of ...
0
votes
1answer
445 views

Evil Twin Attacks against WPA-TLS

Today I'm getting into the details of WPA-Enterprise. Most of what I saw was difference between protocols that use certificates. Most posts say that EAP-TLS is the most secure authentication protocol ...
0
votes
1answer
770 views

What are the roles of PSK and GTK in a WPA setting?

I understand that PTK is ultimately the key that is used to encrypt traffic between a device and the WAP after the 4WHS and that the PMK is directly related to the 'passphrase' of the wireless network....
3
votes
1answer
769 views

Access-Challenge EAP Request

From my understanding, after the Access-Request, the authentication server (RADIUS) sends a reply (encapsulated in the Access-Challenge packet) to the authenticator (AP). The Access-Challenge packet ...
1
vote
0answers
68 views

Manipulate EAP negotiation

The EAP method to use is suggested from the client to the server during the EAP negotiation. I'm trying to make the EAP negotiation ends on one specific EAP method (inner authentication included) of ...
1
vote
0answers
111 views

Force/Suggest the client to use one specific EAP method

I would like to suggest to the client which one EAP method and inner authentication to use. I'm using hostapd to create the AP. I've tried by removing some methods in the hostapd.eap_user but I ...
2
votes
0answers
377 views

Change default EAP type in hostapd [closed]

I'm trying to change the default EAP type in hostapd but I am not able to understand how to do that. Here's what I've found reading the hostapd.conf file: > # NAI Realm information > # One or ...
5
votes
2answers
2k views

WPA2 Enterprise EAP-TLS Key Exchange

I'm in the process of implementing 802.1x WPA2 Enterprise Authentication using FreeRadius and EAP-TLS (Mutual TLS Cert Based Auth). I am keen to understand how to actual protocols work together and ...
1
vote
2answers
2k views

Restrict Microsoft Network Policy Server (NPS) to only trust client certificates from a given CA?

I'm working on an install of a Microsoft Network Policy Sever (NPS) / RADIUS server for controlling access to corporate Wi-Fi using 802.1x / WPA2-Enterprise - using client certificates for ...
2
votes
0answers
277 views

WPA2 EAP-TTLS with PAP: Does the authentication server know the password?

There's a wireless network that I sometimes need to connect to that uses WPA2 with EAP-TTLS and PAP as "inner" protocol. I've been sent a certificate file (presumably for the TTLS to work) and given ...
3
votes
1answer
1k views

WPA2-EAP and Captive Portal

Is it possible to use Captive Portal for WiFi and WPA2-EAP at the same time? Is there any EAP supporting Captive Portal? For example - user connects to WiFi, goes to Captive Portal over unsecure ...
0
votes
1answer
74 views

WPA2-Enterprise certs vs HTTPS certs

I was trying to download the certificate for a WPA2-Enterpise network I was connecting to. However, when I clicked on the link to install it, the browser said the cert was already installed as a CA. ...
7
votes
1answer
307 views

How to provide user friendly WiFi access to gym members with WPA2 Enterprise?

Background A friend of mine is the owner of a medium sized gym. He wants to provide WiFi to his customers and asked me to come up with a concept and eventually also deploy it. As a computer scientist ...
0
votes
0answers
188 views

Is any encyption used for EAP-TLS certificate exchange?

I was reading about the EAP-TLS and mutual client - server authentication using digital certificates. In the authentication process explained in RFC 5216, both server and client exchange ...
2
votes
2answers
172 views

What auth info is locally revealed with eduroam WPA-Enterprise 802.1X?

If you authenticated with your eduroam credentials at a participating institution, your home institution is the one doing the authentication of the credentials, and the host institution is only ...
1
vote
0answers
264 views

Guide on how to create certificates and setup an EAP-TLS on debian [closed]

I need to create an EAP-TLS authentication using a freeradius. Currently I am a working EAp-PEAP setup, it is working fine. However, I now needs to move to an EAP-TLS. For this I need to create some ...
2
votes
2answers
1k views

WPA with PSK and with Radius Server

In case of WPA2 using the Radius server, every client gets its own username and password. But what is the case in the WPA2 using a PSK without the authenticating server. In this case also we have a 4 ...
4
votes
3answers
614 views

Segregating a Printer in my Enterprise Network

I have a EAP-TLS network at home which I've managed for some time now. I just got a new Brother HL-5470 printer so I can finally print things at home, which is really nice. The only problem is that ...