Re: Terminate EAP-PEAP client connection at FreeRadius Proxy and proxy(forward) request as PAP
Hi All, I'm having a problem trying to configure proxy from one radius to another. Users are connecting using 802.1x with EAP/PEAP. There are two groups of users, one group are authenticated on the main radius using local LDAP. However for the second group of users, they have to be authenticated via the radius proxy. The problem is the radius proxy does not have EAP configured and its not an option to reconfigure it with EAP.
From the threads, I found something similar in http://lists.freeradius.org/pipermail/freeradius-users/2008-February/069230.... applies as well, will this applies to my situation as well?
Thanks/Regards, Ryan
Just read through some of the messages available on proxy tunneling. I'm currently using 2.0.2 and read through the examples on inner tunnel which seems to be able to do what I need. Can someone help by providing more details on how it actually works? Thanks/Regards Ryan On Thu, Mar 20, 2008 at 9:12 PM, Ryan <majereryan@gmail.com> wrote:
Hi All,
I'm having a problem trying to configure proxy from one radius to another. Users are connecting using 802.1x with EAP/PEAP. There are two groups of users, one group are authenticated on the main radius using local LDAP. However for the second group of users, they have to be authenticated via the radius proxy. The problem is the radius proxy does not have EAP configured and its not an option to reconfigure it with EAP.
From the threads, I found something similar in http://lists.freeradius.org/pipermail/freeradius-users/2008-February/069230.... applies as well, will this applies to my situation as well?
Thanks/Regards, Ryan
Ryan wrote:
Just read through some of the messages available on proxy tunneling. I'm currently using 2.0.2 and read through the examples on inner tunnel which seems to be able to do what I need. Can someone help by providing more details on how it actually works?
PEAP authentication is really SSL + authentication inside of the SSL tunnel. So... the server handles authentication "outside" of the tunnel, and authentication "inside" of the tunnel as independent authentications. Do you have *specific* questions? Asking "how does it work" is rather open-ended. Alan DeKok.
participants (2)
-
Alan DeKok -
Ryan