On Oct 19, 2017, at 9:51 AM, Tom Yard <tomyyard@gmail.com> wrote:
OK Alan, thank you....but suppose I need to create a second custom virtual server for eap with TLS too, called for example "wifi" and "wifi-tunnel"....where do I have to define them in order to be read???
The better question is why do you need to do that, and what are you trying to do?
client 10.2.0.1 { secret = secret shortname = WLC nastype = cisco virtual_server = wifi virtual_server = wifi-tunnel }
Is this OK ?
No. You can't list "virtual_server" twice, and expect it to magically work. The default configuration doesn't do this, either. The references to "inner-tunnel" are in raddb/mods-available/eap. Go read the comments there to see how it works. Alan DeKok.