o/<br><br>Our FR is doing EAP most of the time, and it&#39;s working fine.<br>However, we would want our NAS to see the inner true User-Name, not the outer one. I know this can be set in the inner-tunnel post-auth section uncommenting the update outer.reply lines, but that exposes our users&#39; inner User-Name to proxied-to-us authentications.<br>

<br>So my question is: Which attributes should I check to tell apart local and external auths?<br><br>Best regards,<br>Alberto<br>