Is RG_ETHER_ADDR needed in supplicant mode? #66

New issue

Open

opened 2022-02-07 01:37:04 +05:30 by owenthewizard · 6 comments

owenthewizard commented

2022-02-07 01:37:04 +05:30

(Migrated from github.com)

I use the attached script (slightly modified) for supplicant mode on OPNsense 21.7.1, and I just use EAP_SUPPLICANT_IDENTITY for everything. Everything works fine.
99-opnatt.txt

I use the attached script (slightly modified) for supplicant mode on OPNsense 21.7.1, and I just use `EAP_SUPPLICANT_IDENTITY` for everything. Everything works fine. [99-opnatt.txt](https://github.com/MonkWho/pfatt/files/8011130/99-opnatt.txt)

bigjohns97 commented

2022-02-18 04:07:13 +05:30

(Migrated from github.com)

Would like to know the answer to this as well, I didn't extract my certs I purchased them.

owenthewizard commented

2022-02-18 23:52:12 +05:30

(Migrated from github.com)

Would like to know the answer to this as well, I didn't extract my certs I purchased them.

You purchased them? So you paid someone to extract them for you? Sounds like you got scammed.

> Would like to know the answer to this as well, I didn't extract my certs I purchased them. You purchased them? So you paid someone to extract them for you? Sounds like you got scammed.

bigjohns97 commented

2022-02-19 00:35:54 +05:30

(Migrated from github.com)

Would like to know the answer to this as well, I didn't extract my certs I purchased them.

You purchased them? So you paid someone to extract them for you? Sounds like you got scammed.

LOL

> > Would like to know the answer to this as well, I didn't extract my certs I purchased them. > > You purchased them? So you paid someone to extract them for you? Sounds like you got scammed. LOL

zimmra commented

2022-03-04 07:51:20 +05:30

(Migrated from github.com)

I too would like to know this, or if RG_ETHER_ADDR should be the same as EAP_SUPPLICANT_IDENTITY

I also purchased certificates (not a scam @owenthewizard , it's relatively common and it works great for me on Unifi)

I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

I too would like to know this, or if RG_ETHER_ADDR should be the same as EAP_SUPPLICANT_IDENTITY I also purchased certificates (not a scam @owenthewizard , it's relatively common and it works great for me on Unifi) I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

aholmes55 commented

2023-06-19 00:52:06 +05:30

(Migrated from github.com)

I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

EAP_SUPPLICANT_IDENTITY should match the certificates. RG_ETHER_ADDR should be the mac address of your current AT&T-provided residential gateway.

> I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway EAP_SUPPLICANT_IDENTITY should match the certificates. RG_ETHER_ADDR should be the mac address of your current AT&T-provided residential gateway.

owenthewizard commented

2023-06-20 00:27:23 +05:30

(Migrated from github.com)

I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

EAP_SUPPLICANT_IDENTITY should match the certificates. RG_ETHER_ADDR should be the mac address of your current AT&T-provided residential gateway.

That is the conventional wisdom yes, but I use EAP_SUPPLICANT_IDENTITY for both even though my certificates are not from my assigned RG, and everything still works.

> > I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway > > EAP_SUPPLICANT_IDENTITY should match the certificates. RG_ETHER_ADDR should be the mac address of your current AT&T-provided residential gateway. That is the conventional wisdom yes, but I use `EAP_SUPPLICANT_IDENTITY` for both even though my certificates are not from my assigned RG, and everything still works.