Default vs Inner-tunnel concepts

[Alan DeKok]

On Oct 19, 2017, at 9:51 AM, Tom Yard <tomyyard at gmail.com> wrote:
> 
> OK Alan, thank you....but suppose I need to create a second custom virtual
> server for eap with TLS too, called for example "wifi" and
> "wifi-tunnel"....where do I have to define them in order to be read???

  The better question is why do you need to do that, and what are you trying to do?

> client 10.2.0.1 {
>        secret                = secret
>        shortname             = WLC
>        nastype               = cisco
>        virtual_server        = wifi
>        virtual_server       = wifi-tunnel
> }
> 
> Is this OK ?

  No.  You can't list "virtual_server" twice, and expect it to magically work.  The default configuration doesn't do this, either.

  The references to "inner-tunnel" are in raddb/mods-available/eap.  Go read the comments there to see how it works.

  Alan DeKok.