How to pass attributes from EAP-TTLS outer to inner?

Jason Murray jemurray at zweck.net
Tue Jun 26 18:17:27 CEST 2007


I have a situation where I need to pass the "Called-Station-Id" from
the outer "anonymous" EAP Authentication-Request to the
inner-authentication request.  Is this possible?

The problem is all my inner authentication requests look like this:

Tue Jun 26 10:55:03 2007
        User-Name = "me at realm"
        User-Password = "somepass"
        FreeRADIUS-Proxied-To = 127.0.0.1
        NAS-IP-Address = 127.0.0.1
        Client-IP-Address = 127.0.0.1


Everything looks like it is coming from localhost.  I need the
Called-Station-Id in order to limit who has access to certain wireless
SSIDs

Is there a better way to authorize a user on a specific SSID using
EAP-TTLS, since all the valuable information is in the outer anonymous
authentication request?

Thanks in advance,

--Jason



More information about the Freeradius-Users mailing list