pfatt icon indicating copy to clipboard operation
pfatt copied to clipboard

Is RG_ETHER_ADDR needed in supplicant mode?

Open owenthewizard opened this issue 3 years ago • 6 comments

I use the attached script (slightly modified) for supplicant mode on OPNsense 21.7.1, and I just use EAP_SUPPLICANT_IDENTITY for everything. Everything works fine. 99-opnatt.txt

owenthewizard avatar Feb 06 '22 20:02 owenthewizard

Would like to know the answer to this as well, I didn't extract my certs I purchased them.

bigjohns97 avatar Feb 17 '22 22:02 bigjohns97

Would like to know the answer to this as well, I didn't extract my certs I purchased them.

You purchased them? So you paid someone to extract them for you? Sounds like you got scammed.

owenthewizard avatar Feb 18 '22 18:02 owenthewizard

Would like to know the answer to this as well, I didn't extract my certs I purchased them.

You purchased them? So you paid someone to extract them for you? Sounds like you got scammed.

LOL

bigjohns97 avatar Feb 18 '22 19:02 bigjohns97

I too would like to know this, or if RG_ETHER_ADDR should be the same as EAP_SUPPLICANT_IDENTITY

I also purchased certificates (not a scam @owenthewizard , it's relatively common and it works great for me on Unifi)

I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

zimmra avatar Mar 04 '22 02:03 zimmra

I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

EAP_SUPPLICANT_IDENTITY should match the certificates. RG_ETHER_ADDR should be the mac address of your current AT&T-provided residential gateway.

aholmes55 avatar Jun 18 '23 19:06 aholmes55

I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

EAP_SUPPLICANT_IDENTITY should match the certificates. RG_ETHER_ADDR should be the mac address of your current AT&T-provided residential gateway.

That is the conventional wisdom yes, but I use EAP_SUPPLICANT_IDENTITY for both even though my certificates are not from my assigned RG, and everything still works.

owenthewizard avatar Jun 19 '23 18:06 owenthewizard