On 11/03/2010 02:18 PM, Влад Власов wrote:
Hello everyone, Please help me I try to setup FreeRadius as proxy. I want to extract MSCHAPv2 auth from EAP-PEAP/MSCHAPv2 ,and proxy only MSCHAPv2 request to another radius server ,that does not work with a EAP-PEAP. changed only the following items:
clients.conf client 172.100.100.24/30 { secret = secretpass shortname = AP_50 }
proxy.conf
realm nc { authhost = 172.10.10.1:1812 accthost = 172.10.10.1:1813 secret = secretpass }
realm DEFAULT { authhost = 172.10.10.1:1812 accthost = 172.10.10.1:1813 secret = secretpass }
eap.conf
default_eap_type = peap default_eap_type = mschapv2 proxy_tunneled_request_as_eap = no
The proxying needs to happen in the inner-tunnel virtual server, not the outer PEAP server. Comment out the "suffix" and "ntdomain" modules /etc/raddb/sites-enabled/default; then comment out the: update control { Proxy-To-Realm := LOCAL } ...in /etc/raddb/sites-enabled/inner-tunnel