Sorry, by NAS I was referring to the Home Radius Server (guess my terminology was incorrect), but I guess that answers the question anyways. John On Thu, Jan 7, 2010 at 12:55 PM, Alan DeKok <aland@deployingradius.com> wrote:
John Gammons wrote:
My client "Ubiquity Nanostation" only supports EAP-TTLS MSCHAPv2.
My NAS, only supports access-requests using PAP/CHAP passwords in clear-text.
What does that mean?
I am attempting to setup a "Radius Proxy" that terminates the EAP-TTLS outer, and takes MSCHAPv2 inner tunnel, and forwards a clear-text user/pass to the NAS for authentication.
The NAS is a RADIUS client. It originates Access-Requests. It doesn't receive them, and it definitely doesn't do authentication.
The more I read, the more I am getting the impression that this is not possible. Is that the case?
You can't convert MS-CHAP into PAP or CHAP. And I have no idea what you mean when you say the NAS does authentication.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html