Hi,
authorize { + update request { + Local-SSID := "%{outer.request:Local-SSID}" + }
and that works:
(11) # Executing section authorize from file /etc/raddb/sites-enabled/inner-tunnel (11) authorize { (11) update request { (11) EXPAND %{outer.request:Local-SSID} (11) --> MYSSID (11) Local-SSID := "MYSSID" (11) } # update request = noop
So I guess that should also work with Called-Station-SSID.
..and it does, doesnt it? according to your own variable mix testing, you saw that the following ended up triggering a match and setting the reply: (7) update request { (7) EXPAND %{outer.request:Called-Station-SSID} (7) --> MYSSID (7) Called-Station-SSID := "MYSSID" (7) } # update request = noop (7) if ( Called-Station-SSID ) (7) if ( Called-Station-SSID ) -> TRUE (7) if ( Called-Station-SSID ) { (7) update reply { (7) EXPAND 3: Called-Station-SSID = %{Called-Station-SSID} (7) --> 3: Called-Station-SSID = MYSSID (7) Reply-Message += "3: Called-Station-SSID = MYSSID" so %{outer.request:Called-Station-SSID} is required...and is picked up. alan