On 05/24/2011 05:03 PM, Alan Buxey wrote: > > so, in inner-tunnel post-auth, set "outer.reply" to be whatever you want.. > you can then, in the outer layer, query/check or use that reply. Unfortunately, outer.reply is an Access-Challenge.