<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>Mutual TLS authentication in handshake phase of EAP-TTLS</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">Hi,</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> apologies if this question has been answered elsewhere - I looked but couldn't see anything, even in the "Mutual EAP-TTLS Authentication" thread.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">I am currently looking at the eapol_test code to see if I can use it as a RADIUS client. I have ran eapol_test with various EAP-TLS and EAP-TTLS configuration files, testing successfully with a freeRADIUS server. Looking at the EAP-TTLS RFC 5281, I have read the following: </FONT></P>
<P><FONT SIZE=2 FACE="Courier New">In EAP-TTLS, the TLS authentication may be mutual; or it may be one-way, in which only the server is authenticated to the client.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">My question is, does eapol_test currently allow mutual TLS authentication for EAP-TTLS? If so, how do I configure it (or the configuration files) to do so? I believe the tunnelled protocol can also be TLS but I want to avoid this as I need to have the ability to verify users rather than the client (e.g. by doing user/password checks).</FONT></P>
<P><FONT SIZE=2 FACE="Arial">I'd appreciate any help you can give.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Regards,</FONT>
<BR><FONT SIZE=2 FACE="Arial">Adam Lewis.</FONT>
</P>
</BODY>
</HTML>