Thanks Alan,
Bertalan Voros wrote:Yes, but you don't want to do that.
> Is it possible to proxy requests based on Auth-Type?
You need to *conditionally* run the "suffix" module then. In the
> If I uncomment suffix in sites-enabled/default then it's reversed,
> mschap gets proxied but PEAP requests doesn't get sent through the inner
> tunnel.
sites-enabled/default, do:
authorize {
...
if (!EAP-Message) {
suffix
}
...
}
That should solve the problem quite nicely.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html