11 Feb
2009
11 Feb
'09
10:54 a.m.
Jonathan Gazeley wrote:
This is pretty much the config I had already. My eap.conf already specifies a virtual inner server. The only difference was that I had 'use_tunneled_reply = no', so I changed that to 'yes'.
My inner virtual server, 'inner-tunnel' already had an 'update reply' block identical to yours.
But with this change I still get the outer identities in my accounting logs. Any ideas what's up?
OK, I've solved my problem at least. I had to apply use_tunneled_reply = yes in the ttls section as well as the peap section. The majority of our users use peap so I mistakenly overlooked the ttls users. Thanks for your help Arran and others. Jonathan