Thanks Alan,

It did fix the problem perfectly.

On 1 February 2013 14:33, Alan DeKok <aland@deployingradius.com> wrote:
Bertalan Voros wrote:
> Is it possible to proxy requests based on Auth-Type?

  Yes, but you don't want to do that.

> If I uncomment suffix in sites-enabled/default then it's reversed,
> mschap gets proxied but PEAP requests doesn't get sent through the inner
> tunnel.

  You need to *conditionally* run the "suffix" module then.  In the
sites-enabled/default, do:

authorize {
        ...
        if (!EAP-Message) {
                suffix
        }
        ...

}

  That should solve the problem quite nicely.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



--
Bertalan Voros
m: 07932858025