Kolbjørn Barmen wrote: > However, it only works for the so called "outter" identity. > Any tip on how to make it work for the "inner" identity instead? In 2.0, just put that into a virtual server for inner tunnels. See raddb/sites-available/inner-tunnel. In 1.x, do: # runs only in the inner tunnel DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, ... reply .... Alan DeKok.