Nice vid, thanks. I would quite like to see some information on setting up certificates on FreeRADIUS for WiFi access control when you get round to that bit.
Great demonstration. One question - if you put an unmanaged switch between your switch and the raspberry, will this port accept other clients as well after the raspberry authenticate, or is it just for that single client?
Ive spent the last 2 days trying to work out why I can authenticate to my freeradius server on my OpenWRT box via wireless (whohoo) but cant through the LAN port on the same OpenWRT box-now I know why-there is no authenticator on the LAN ports (just DHCP), whereas there is on the wireless side! So now away to plug the whole dam lot into my TP-LINK switch which HAS 802.1x on the ports-thumbs up big fella!
Hello! You explain how protocol 802.1X theoretically works . But can you show the switch port configuration or how to configure the switch ? What about after the authentication is accepted, who and how the port on the switch is configured ? Thx in advance
If you go back through his video library he has an excellent tutorial on how to set up a RADIUS server on a RPi. Bit outdated as he is using V2 and it is now V3 but I managed to do it so it must be easy.
Hi, Thanks for all uploads these are very interesting and well presented. I am doing a project on Rasperry Pi which has to trigger a camera. I wish it was that simple though. I got stuck and now looking for someone whom could and would be interested in helping me. I would be interrested in paying for the time spend. Do you have any suggestions to where I can find that person?
This is something I've been meaning to look into thanks for covering this is there more that's worth seeing on the pfsense side or is it no different to radius wifi ? Also are you aware of the rassberry pi tesla project for music in the car and stores the dashcam footage from the built in cameras ? I'm sure with some scripting this could be set to dump them on the network
@@eelko1koppen Thanks. I wasn't sure if it would bypass the whole authentication process or not. I figured there'd be some mechanism, but I've seen dumber mistakes in security solutions in the past.
Trust me these are great videos... But if you can show how you set up all the server and how you did all these instead of just showing these that'll make effect... Because 70% of viewers won't understand all this so you can start from very basic... Hopefully I didn't offend... Thank you so much
I've just watched 5 videos on 802.1X and yours is the ONLY one that actually demonstrates it in actions - kudos.
Mate, that's what I like to hear! Saying something is one thing... doing it is another
CWNE88 did you ever follow this video up with how to configure the various elements?
Nice vid, thanks. I would quite like to see some information on setting up certificates on FreeRADIUS for WiFi access control when you get round to that bit.
Great demonstration. One question - if you put an unmanaged switch between your switch and the raspberry, will this port accept other clients as well after the raspberry authenticate, or is it just for that single client?
Ive spent the last 2 days trying to work out why I can authenticate to my freeradius server on my OpenWRT box via wireless (whohoo) but cant through the LAN port on the same OpenWRT box-now I know why-there is no authenticator on the LAN ports (just DHCP), whereas there is on the wireless side! So now away to plug the whole dam lot into my TP-LINK switch which HAS 802.1x on the ports-thumbs up big fella!
Might be interesting to take a look at 802.11x with VLAN assignment!
These are quality videos and super informative. Keep up the good work!!!!
Awesome videos. You break it down so well. Thanks!
That "Here I am lets do this" made the video
Very cool video. Thanks for the demonstration.
Really well explained, thank you 👍🏼
Hello! You explain how protocol 802.1X theoretically works . But can you show the switch port configuration or how to configure the switch ? What about after the authentication is accepted, who and how the port on the switch is configured ? Thx in advance
Great video sir! you have my like...
Thanks for the share. How does the Pi get configured to automatically re-connect?
Can you do a video on how to set up a RADIUS server?
If you go back through his video library he has an excellent tutorial on how to set up a RADIUS server on a RPi. Bit outdated as he is using V2 and it is now V3 but I managed to do it so it must be easy.
Hi, Thanks for all uploads these are very interesting and well presented.
I am doing a project on Rasperry Pi which has to trigger a camera. I wish it was that simple though. I got stuck and now looking for someone whom could and would be interested in helping me. I would be interrested in paying for the time spend. Do you have any suggestions to where I can find that person?
Why was the password listed twice in the wpa_supplicant file?
This is something I've been meaning to look into thanks for covering this is there more that's worth seeing on the pfsense side or is it no different to radius wifi ?
Also are you aware of the rassberry pi tesla project for music in the car and stores the dashcam footage from the built in cameras ? I'm sure with some scripting this could be set to dump them on the network
Great explanation as always! What did you use for the packet capture on the Linux hosts? Was it just tcpdump?
Curiousity strikes, what happens when the device is configured static. How does that effect 802.11x EAP/RADIUS interactions?
Mark LaDoux that only matters after authentication. That’s layer 3 the authentication is on layer 2.
@@eelko1koppen Thanks. I wasn't sure if it would bypass the whole authentication process or not. I figured there'd be some mechanism, but I've seen dumber mistakes in security solutions in the past.
Could you provide packet capture files and other ras pi configuration files for us to further checking and validation
You are using a RPI Model B. Where did you get the case? Can you share a link? Can't find one for sale.
The only place you'll find a case for a 1B these days is eBay. Practical alternatives are 3d printing or modifying a case designed for a later model.
@@firstsurname9893 Thanks. I found one and ordered it on ebay. Had to search with -2 -3 -4 so it would filter out all the other cases.
Is it possible to combine this effective with PXE?
+1 to the request for help seeing certificates setup for locking down wi-fi using pfsense and an access point!
I was a little surprised to see the password in plaintext in that config file
Keep in mind that this situation is like someone finding your house keys inside your house.
Trust me these are great videos... But if you can show how you set up all the server and how you did all these instead of just showing these that'll make effect... Because 70% of viewers won't understand all this so you can start from very basic... Hopefully I didn't offend... Thank you so much