Hi All, Can someone just confirm whether I can override the module codes in the eap auth module? I'm trying Auth-Type eap { eap { reject = 1 invalid = 1 ok = 1 } if (!ok) { update control { Debug-RejectInformation := "%{Module-Failure-Message}" } ok } I know it looks odd, but I'm trying to override the reject packet with an accept but with attributes that force the client into a specific remuneration vlan / policy on the wireless controller. Maybe this is by design. I can override all the other modules ok just not eap. Thanks Andy
Franks Andy (RLZ) IT Systems Engineer wrote:
Can someone just confirm whether I can override the module codes in the eap auth module?
Yes. EAP is a module just like anything else.
I’m trying
And... what does the debug log show?
I know it looks odd, but I’m trying to override the reject packet with an accept but with attributes that force the client into a specific remuneration vlan / policy on the wireless controller.
That's impossible. The design of WiFi and how it works with EAP makes that impossible.
Maybe this is by design. I can override all the other modules ok just not eap.
No. You *can* override EAP. See the debug output. The supplicant and wireless controller will refuse to communicate when you override EAP. But that has nothing to do with FreeRADIUS. Alan DeKok.
participants (3)
-
A.L.M.Buxey@lboro.ac.uk -
Alan DeKok -
Franks Andy (RLZ) IT Systems Engineer