Got it figured. Was actually trying to ask if it will terminate all EAP requests regardless of realm. Regards, Ryan Date: Tue, 22 Apr 2008 16:41:33 +0200 From: Alan DeKok <aland@deployingradius.com> Subject: Re: Possible to limit user access to different types of authentication? To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <480DF91D.3060404@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 Ryan wrote:

I have worked around it using the proxy-inner-tunnel method to terminal the EAP on the front radius and then proxy MS-CHAP to an internal radius that will do an LDAP bind with an additional attribute.

Ok...

As the front radius will also handle EAP requests that will not be handled by the internal radius, will it just proxy the EAP request based on the domain or it will terminate and forward to my internal radius instead?

Huh? You said in the first paragraph that it will terminate & forward. Where's the confusion? Alan DeKok.