Re: PEAP auth rejected due to different inner and outer user-id

On Sun, Feb 16, 2014 at 3:50 AM, Alan DeKok <aland@deployingradius.com> wrote:

douglas eseng wrote:

...

What would be the correct configuration to allow accurate accounting?

Set use_tunneled_reply = yes

In the inner-tunnel post_auth section, do:

update reply { User-Name := "%{User-Name}" }

That works for me.

Also, enable filtering of Access-Challenge packets as described above. And file a bug with the NAS vendor.

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Thanks Alan, After enabling the above three steps, accounting is now working correctly when outer and inner userid are different. Keep up the good work.