Using freeradius as proxy for EAP-SIM/EAP-AKA

Ming-Ching Tiew mctiew at yahoo.com
Tue Jul 2 08:56:56 CEST 2013



From: Iliya Peregoudov <iperegudov at cboss.ru>

To: freeradius-users at lists.freeradius.org 
Sent: Tuesday, July 2, 2013 2:20 PM
Subject: Re: Using freeradius as proxy for EAP-SIM/EAP-AKA
 

On 01.07.2013 18:34, Alan DeKok wrote:
>>> It's not possible for one proxy radius to send request to different EAP
>>> SIM/EAP AKA radius server (based on certain criteria) ?
>>
>>    When you're proxying an EAP packet, the ONLY criteria you have is the
>> EAP identity.  You do NOT have the EAP type available.

>You can proxy Access-Requests to another server if User-Name matches 
>[^@]*@wlan.mncX.mccY.3gppnetwork.org. This another server should insist 
> on using EAP-SIM. If user tries to use another EAP method server should 
>reject the user.

So this [^@]*@wlan.mncX.mccY.3gppnetwork.org is unique ? All the SIMs from the same mobile operator will have the same string and it will be different from another mobile operator ? 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130701/c4bb0226/attachment.html>


More information about the Freeradius-Users mailing list