accounting 'detail' file and EAP
aland at ox.org
Mon Aug 1 07:21:26 CEST 2005
"Kris Benson" <kbenson at sd57.bc.ca> wrote:
> Has anyone come up with a way to either A) ensure the outside username
> matches the inside one (guaranteeing the outside one isn't falsified) or
> B) log the accounting details with the tunnel information?
Use the "class" attribute. Set it to some value inside of the
tunnel, and set "use_tunneled_reply=yes". You will then see it come
back in accounting packets outside of the tunnel.
You will need to log the *inner* tunnel username & Class attribute,
to tie those two together, too.
More information about the Freeradius-Users