On Aug 3, 2022, at 12:25 PM, work vlpl <thework.vlpl@gmail.com> wrote:
Yes, most likely this is not counted as 2 EAP-Messages, because I read in RFC that they should be concatenated. But this is what I see in the eapol_test output. Received 51 bytes from RADIUS server Received RADIUS message RADIUS message: code=3 (Access-Reject) identifier=8 length=51 Attribute 79 (EAP-Message) length=6 Value: 045b0004 Attribute 80 (Message-Authenticator) length=18 Value: 3c2cba56f12f77053c8264207be0a8d2 Attribute 79 (EAP-Message) length=7 Value: 6572726f72 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 1.05 sec
OK...
And with unlang I am doing next
update reply { EAP-Message += "error" }
Don't do that. Use Reply-Message. EAP-Message is calculated automatically by the EAP module. It's supposed to contain EAP packets, not random text. Alan DeKok.