Thanks Alan,<div><br></div><div>It did fix the problem perfectly.<br><br><div class="gmail_quote">On 1 February 2013 14:33, Alan DeKok <span dir="ltr"><<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">Bertalan Voros wrote:<br>
> Is it possible to proxy requests based on Auth-Type?<br>
<br>
</div>  Yes, but you don't want to do that.<br>
<div class="im"><br>
> If I uncomment suffix in sites-enabled/default then it's reversed,<br>
> mschap gets proxied but PEAP requests doesn't get sent through the inner<br>
> tunnel.<br>
<br>
</div>  You need to *conditionally* run the "suffix" module then.  In the<br>
sites-enabled/default, do:<br>
<br>
authorize {<br>
        ...<br>
        if (!EAP-Message) {<br>
                suffix<br>
        }<br>
        ...<br>
<br>
}<br>
<br>
  That should solve the problem quite nicely.<br>
<span class="HOEnZb"><font color="#888888"><br>
  Alan DeKok.<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br>Bertalan Voros<div>m: 07932858025</div>
</div>