Re: terminating EAP tunnels, proxy and realms

Arran Cudbard-Bell wrote:

So the eap module extracts the attributes encoded in the eap message ? I can see that working for EAP GTC and EAP PAP but not MschapV2 ?

It works for GTC, PAP, and MS-CHAPv2. The server can terminate PEAP, and proxy the inner EAP-MSCHAPv2 session as plain MS-CHAPv2. With the new virtual server support, it's now possible to have the inner tunnel session run through it's own virtual server, independent of the outer tunnel session. Just set "Virtual-Server = foo" via "update control", and the inner tunnel session will be run through "server foo". 30 lines of code changed: incredible new flexibility. Alan DeKok.