20 Apr
2016
20 Apr
'16
9:34 a.m.
On Apr 20, 2016, at 9:21 AM, A.L.M.Buxey@lboro.ac.uk wrote:
reject is fail....and client would just try again....and again.... what you want to do, its for a particular user, NAK that EAP type so the client DOES try another one...
That may help... but it's still a negotiation.
which means.....you need to use different inner-tunnels, with different available EAP types available in each, for each type/class of user....
I don't think that's necessary. But it is necessary to send custom NAKs back... which isn't supported right now. Alan DeKok.