On 10/05/2011 12:54 PM, Alan DeKok wrote:
Nitin Bhardwaj wrote:
I want to configure FreeRADIUS to do the following two things:
(1) Handle tunnel for PEAP authentication requested by any supplicant(s), and do mschapv2 auth with another RADIUS server. (Irrespective of the realm in the user-name)
(2) Transparently proxy all other non-PEAP requests to another RADIUS server (like LEAP, EAP-FAST etc etc). ( Again, Irrespective of the realm in the user-name). That's impossible.
By the time the server discovers that the client is using a particular EAP method, the EAP session has started, and it's impossible to proxy it to another RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks a lot Alan for the insight. -- Nitin Bhardwaj