Re: FR2 - proxying inner tunnel

14 Feb 2008

      Dmitry Sergienko wrote:
...
Config file is the same as default example proxy-inner-tunnel in 2.0.2
release with modified realm name only.
I really don't understand.

  1) default config
  2) edit eap.conf, peap{} section to set proxy_tunneled_request_as_eap = no
  3) edit eap.conf, peap{} section to set virtual_server =
"proxy-inner-tunnel"
  4) edit proxy.conf to add realm "example.com" with another RADIUS server.
  5) send PEAP request.
  6) verify that MS-CHAPv2 is proxied to second RADIUS server
  7) verify that the supplicant receives EAP-MSCHAPv2 with MSCHAP Success.

  Alan DeKok.