10 May
2011
10 May
'11
3:24 a.m.
Nitin Bhardwaj wrote:
I want to configure FreeRADIUS to do the following two things:
(1) Handle tunnel for PEAP authentication requested by any supplicant(s), and do mschapv2 auth with another RADIUS server. (Irrespective of the realm in the user-name)
(2) Transparently proxy all other non-PEAP requests to another RADIUS server (like LEAP, EAP-FAST etc etc). ( Again, Irrespective of the realm in the user-name).
That's impossible. By the time the server discovers that the client is using a particular EAP method, the EAP session has started, and it's impossible to proxy it to another RADIUS server. Alan DeKok.