20 Dec
2012
20 Dec
'12
1:17 p.m.
On 12/20/2012 05:14 PM, rosect190@yahoo.com wrote:
It is noticed that some VSAs are sent with Access-Challenge but not with Access-Accept when PEAP is used.
Is there a way to configure the server such that those attributes are sent with Access-Accept?
"use_tunneled_reply = yes" under the "peap {}" section in "eap.conf". In addition, if you're seeing the VSAs in Access-Challenge, it's most likely because you're returning them in the "authorize" second. Instead, consider returning them in the "post-auth" section of the "inner-tunnel" server, combined with the config above. There are other options, depending on your needs.