server inner-tunnel { listen { ipaddr = 127.0.0.1 port = 18120 type = auth } authorize { chap mschap # unix # IPASS suffix # ntdomain update control { Proxy-To-Realm := LOCAL } eap { ok = return } files sql # etc_smbpasswd # ldap # daily # checkval expiration logintime pap } authenticate { Auth-Type PAP { pap } Auth-Type CHAP { chap } Auth-Type MS-CHAP { mschap } # pam unix # Auth-Type LDAP { # ldap # } eap } session { radutmp # sql } post-auth { # reply_log # sql # sql_log # ldap Post-Auth-Type REJECT { # sql attr_filter.access_reject } } pre-proxy { # attr_rewrite # files # attr_filter.pre-proxy # pre_proxy_log } post-proxy { # post_proxy_log # attr_rewrite # attr_filter.post-proxy eap # Post-Proxy-Type Fail { # detail # } } } # inner-tunnel server block