Not able to receive inner identity in Access-Accept in EAP-TTLS.

6 Aug 2014

      Hi Team,

I am using freeradius version 2.1.12.

I have configured following in the eap.conf file in the ttls section :

copy_request_to_tunnel = yes
use_tunneled_reply = yes
virtual_server = "inner-tunnel"

and in the inner-tunnel file i have configured following :

post-auth {
         ....
          update outer.reply {
                  User-Name := "%{Stripped-User-Name}"
          }

I am able to get the inner identity in Access-Accept if I use PEAP with 
MS-CHAPv2, but I am not getting inner identity in Access-Accept if I use 
EAP-TTLS.

Please find the eap.conf, inner-tunnel and free_radius.log files in the 
attachment.

File free_radius.log has logs of EAP-TTLS method only. I am using 
'testuser' as inner identity and 'anonymous' as outer identity(anonymous 
identity).

Please provide your inputs on this.

Thanks,
Bhavesh.

Not able to receive inner identity in Access-Accept in EAP-TTLS.

Bhavesh Kamani