dot1x doesn't need any CA certificate if using MD5-Challenge ,

From: johngibson1541@yahoo.com
Date: Fri Dec 15 2006 - 16:49:01 ART

I think I finally figured that out.

PEAP, MS-CHAPv2 need those certificate .

For R/S, we should only focus on MD5-Challenge.

I sent a lot of time learning to operate a CA (signing certificates) for myself. But learned the PKI system. Interesting.

But, it is still good to setup a radius server for R/S preparation (do ACS with dot1x on 3550).

John

This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:38 ART