Hi, Nathan McDavit-Van Fleet <nmcdavit@alcor.concordia.ca> wrote:
Is there anyway to have Freeradius log whether a connection is either PEAP or TTLS in the log file? Both of them indicated that it is through a TLS tunnel with no indication of the differences. FYI they are coming through the same NAS server.
As far as I know, only if the EAP part terminates on your RADIUS server, for use I use (on a EAP virtual server) something like: update outer.control { EAP-Type := "%{EAP-Type}" } Then on the outside layer you should find in post-auth that '%{control:EAP-Type}' has what you are after. It's harder to get the phase2 auth (also worth doing) out to the outer most post-auth section using a similar method, but possible. Cheers -- Alexander Clouter .sigmonster says: boy, n: A noise with dirt on it.