18 Jun
2005
18 Jun
'05
4:21 p.m.
-ragan_davis@colstate.edu wrote:
Did you set "User-Name = novelluser" in the *reply* for the tunneled session?
Hmmmm...I did not explicitly do this. How to?
Set it as a reply attribute? user blah-blah = blah User-Name = `%{User-Name}`
You can verify that, independent of EAP, but using "radtest" with the name & password of the tunneled user.
I'm testing this now, but don't see the same "Access-Accept" message in the debug output. Guess I'm still missing something.
You will see the INNER TUNNEL Access-Accept. The reply attributes in that Access accept are the ones which will be copied to the outer tunnel, when TTLS is used. Alan DeKok.