Inner Tunnel User-Name

Hi, I have configured EAP-TTLS+PAP using sites-enabled/proxy-inner-tunnel. After I get the Access-Accept message, I do dynamic VLAN assignment in sites-enabled/default in the post-auth section. The one thing is: the dynamic VLAN assignment uses the outer User-Name. It works if the outer-tunnel matches the inner-tunnel username. I want to do the dynamic VLAN assignment using the Inner-Tunnel User-Name. Where can I access the inner-tunnel %{request.User-Name} with ulang after the Access-Accept message ? Regards, Christoph