accounting 'detail' file and EAP

Alan DeKok aland at
Mon Aug 1 07:21:26 CEST 2005

"Kris Benson" <kbenson at> wrote:
> Has anyone come up with a way to either A) ensure the outside username
> matches the inside one (guaranteeing the outside one isn't falsified) or
> B) log the accounting details with the tunnel information?

  Use the "class" attribute.  Set it to some value inside of the
tunnel, and set "use_tunneled_reply=yes".  You will then see it come
back in accounting packets outside of the tunnel.

  You will need to log the *inner* tunnel username & Class attribute,
to tie those two together, too.

  Alan DeKok.

More information about the Freeradius-Users mailing list