OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: jannemann on May 08, 2017, 07:33:04 pm

Title: Using Voucher Server for authenticating WPA2 Enterprise Clients
Post by: jannemann on May 08, 2017, 07:33:04 pm

I wonder if i could use the integrated voucher ticket server for restricting physical access to a wireless guest network protected by wpa2 enterprise. I can indeed use a freeradius server but i very much like the integrated generator for voucher codes in opnsense.

Title: Re: Using Voucher Server for authenticating WPA2 Enterprise Clients
Post by: franco on May 08, 2017, 08:22:50 pm

Hi jannemann,

There is no issue with stacking WPA2 with Vouchers or any other authentication for that matter (2FA). RADIUS befit is that you could optionally do accounting with it.


Cheers,
Franco

Title: Re: Using Voucher Server for authenticating WPA2 Enterprise Clients
Post by: jannemann on May 08, 2017, 09:00:25 pm

and can i use the voucher server as a radius server for the authentication in my access points some how?

Title: Re: Using Voucher Server for authenticating WPA2 Enterprise Clients
Post by: franco on May 09, 2017, 06:52:35 am

No, vouchers are pre-generated random username + password combinations.

You could emulate them with your RADIUS, but wouldn't use the internal voucher system then.