Norman Elton <normelton@gmail.com> wrote:
Looking at the documentation and proxy.conf, I see that FreeRadius can do all sorts of proxying based on the username. Can it determine the correct proxy server by checking the value (or existence) of a particular attribute?
Yes. DEFAULT Some-Attribute == some-value, Proxy-To-Relm := example.com
I'd like to forward all PEAP requests to one server, and all other requests to another server.
I'm not sure that's possible. EAP does EAP-Identity first, and then does PEAP in the same session. You could try: DEFAULT EAP-Type == PEAP, Proxy-To-Realm := example.com But the other server may get excited that it only saw part of the PEAP conversation. You're really better off proxying on some other key. Alan DeKok.