From owner-freebsd-net@freebsd.org Wed May 30 14:40:06 2018 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6DC8DF71BED for ; Wed, 30 May 2018 14:40:06 +0000 (UTC) (envelope-from bengt.ahlgren@ri.se) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id E75D0864C1 for ; Wed, 30 May 2018 14:40:05 +0000 (UTC) (envelope-from bengt.ahlgren@ri.se) Received: by mailman.ysv.freebsd.org (Postfix) id 4E3C6F71BE7; Wed, 30 May 2018 14:40:05 +0000 (UTC) Delivered-To: net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B165DF71BE5 for ; Wed, 30 May 2018 14:40:04 +0000 (UTC) (envelope-from bengt.ahlgren@ri.se) Received: from smtp-out11.electric.net (smtp-out11.electric.net [185.38.181.39]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3929B864BE for ; Wed, 30 May 2018 14:40:03 +0000 (UTC) (envelope-from bengt.ahlgren@ri.se) Received: from 1fO1eJ-0005oY-Ti by out11a.electric.net with emc1-ok (Exim 4.90_1) (envelope-from ) id 1fO1eJ-0005qH-Uo; Wed, 30 May 2018 07:00:23 -0700 Received: by emcmailer; Wed, 30 May 2018 07:00:23 -0700 Received: from [194.218.146.197] (helo=sp-mail-3.sp.se) by out11a.electric.net with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128) (Exim 4.90_1) (envelope-from ) id 1fO1eJ-0005oY-Ti; Wed, 30 May 2018 07:00:23 -0700 Received: from P142s.sics.se (10.116.0.226) by sp-mail-3.sp.se (10.100.0.163) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Wed, 30 May 2018 16:00:23 +0200 Received: from P142s.sics.se (localhost [127.0.0.1]) by P142s.sics.se (8.15.2/8.15.2) with ESMTPS id w4UE0KEb003262 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Wed, 30 May 2018 16:00:20 +0200 (CEST) (envelope-from bengt.ahlgren@ri.se) Received: (from bengta@localhost) by P142s.sics.se (8.15.2/8.15.2/Submit) id w4UE0J2G003261; Wed, 30 May 2018 16:00:19 +0200 (CEST) (envelope-from bengt.ahlgren@ri.se) X-Authentication-Warning: P142s.sics.se: bengta set sender to bengt.ahlgren@ri.se using -f From: Bengt Ahlgren To: Doug Ambrisko CC: Zeus Panchenko , Subject: Re: 8021x on wired Ethernet In-Reply-To: (Bengt Ahlgren's message of "Tue, 29 May 2018 10:32:20 +0200") References: <20180516141721.73733@relay.xx> <20180529025527.GA71613@ambrisko.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.3 (berkeley-unix) Date: Wed, 30 May 2018 16:00:19 +0200 Message-ID: MIME-Version: 1.0 Content-Type: text/plain X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-3.sp.se (10.100.0.163) X-Outbound-IP: 194.218.146.197 X-Env-From: bengt.ahlgren@ri.se X-Proto: esmtps X-Revdns: X-HELO: sp-mail-3.sp.se X-TLS: TLSv1.2:ECDHE-RSA-AES128-SHA256:128 X-Authenticated_ID: X-PolicySMART: 14510320 X-Virus-Status: Scanned by VirusSMART (c) X-Virus-Status: Scanned by VirusSMART (s) X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 May 2018 14:40:06 -0000 Bengt Ahlgren writes: > Doug Ambrisko writes: > >> On Wed, May 16, 2018 at 02:17:21PM +0300, Zeus Panchenko wrote: >> | Bengt Ahlgren wrote: >> | > Is there a standard "rc.conf" way to configure 8021x authentication on >> | > wired ethernet? >> | >> | looks like it's to be something like: ifconfig_em0="WPA" >> >> Yes for example; >> ifconfig_em0="WPA " >> >> We use 802.1x at work. > > Thanks Zeus and Doug, it does work! I use ifconfig_em0="WPA DHCP". > > I first thought I needed a separate wpa_supplicant.conf for wired, but > it finds the appropriate entry there anyway among many WiFis. It however does not work so well booting with no Ethernet plug connected. The boot hangs when wpa_supplicant is started - a ctrl-C however aborts it and the boot continues. Any ideas to make this more convenient? Bengt