Date: Mon, 8 Jan 2018 14:13:16 +0700 From: Victor Sudakov <vas@mpeks.tomsk.su> To: Freddie Cash <fjwcash@gmail.com> Cc: freebsd-net <freebsd-net@freebsd.org> Subject: Re: Fwd: Re: Quasi-enterprise WiFi network Message-ID: <20180108071316.GA52442@admin.sibptus.transneft.ru> In-Reply-To: <CAOjFWZ4KFdTr17SxOx127vPsXC72csP%2BhMx5k_A=oZYiV%2BAsAw@mail.gmail.com> References: <CAOjFWZ6kYSTKmPHpQqd%2BywrUNVLcG6JNzwFJYPyt5z1H4HeRUw@mail.gmail.com> <20180107180422.GA46756@admin.sibptus.transneft.ru> <CAOjFWZ4LCS2yP7-z-RtKvVrwQAE=t=JxZEanS91GShpkN%2BSgNg@mail.gmail.com> <CAOjFWZ6vsjqCT0x9WDSPEN%2BZFcOmD6o8HY--S=Lw8m7ErEbOtw@mail.gmail.com> <CAOjFWZ4KFdTr17SxOx127vPsXC72csP%2BhMx5k_A=oZYiV%2BAsAw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Freddie Cash wrote: > > > Ah, ok, now I see what you mean by "quasi-enterprise WiFi). You are looking > for a way to create an encrypted wireless connection where a > username/password combo is used instead of a PSK, using something like (but > not as heavy as) 802.1x. I don't even need an *encrypted* wireless connection, these username/login pairs are not precious, and the traffic is just Internet. Yet another problem with captive portals is that not all client applications are web browsers. I personally get very annoyed when my mobile RSS reader or some other app does not work until I visit some stupid web page. > > Can't help with that. We stayed down the 802.1x path, had a working RADIUS > setup, but balked at all the setup that would be required on the end-user > devices and abandoned it. > > There may be a way to do it automatically nowadays, without requiring > client certs and 802.1x clients, but we haven't looked into it in over 5 > years. Yes, that's what I'm looking for, without requiring client certs and 802.1x clients. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20180108071316.GA52442>