Is RG_ETHER_ADDR needed in supplicant mode?

Question

Is RG_ETHER_ADDR needed in supplicant mode?

owenthewizard opened this issue 3 years ago · 6 comments

I use the attached script (slightly modified) for supplicant mode on OPNsense 21.7.1, and I just use EAP_SUPPLICANT_IDENTITY for everything. Everything works fine.
99-opnatt.txt

Answer 1 · 2022-02-17T22:37:13.000Z

Would like to know the answer to this as well, I didn't extract my certs I purchased them.

Answer 2 · 2022-02-18T18:22:12.000Z

Would like to know the answer to this as well, I didn't extract my certs I purchased them.

You purchased them? So you paid someone to extract them for you? Sounds like you got scammed.

Answer 3 · 2022-02-18T19:05:54.000Z

Would like to know the answer to this as well, I didn't extract my certs I purchased them.

You purchased them? So you paid someone to extract them for you? Sounds like you got scammed.

LOL

Answer 4 · 2022-03-04T02:21:20.000Z

I too would like to know this, or if RG_ETHER_ADDR should be the same as EAP_SUPPLICANT_IDENTITY

I also purchased certificates (not a scam @owenthewizard , it's relatively common and it works great for me on Unifi)

I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

Answer 5 · 2023-06-18T19:22:06.000Z

I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

EAP_SUPPLICANT_IDENTITY should match the certificates. RG_ETHER_ADDR should be the mac address of your current AT&T-provided residential gateway.

Answer 6 · 2023-06-19T18:57:23.000Z

I can deduce that EAP_SUPPLICANT_IDENTITY should be matching the certificates I received, what I don't know is if RG_ETHER_ADDR should also be this mac address, or if it should match my actual AT&T gateway

EAP_SUPPLICANT_IDENTITY should match the certificates. RG_ETHER_ADDR should be the mac address of your current AT&T-provided residential gateway.

That is the conventional wisdom yes, but I use EAP_SUPPLICANT_IDENTITY for both even though my certificates are not from my assigned RG, and everything still works.