I'm trying to use a selfmade script to decide VLAN-attributes for EAP/PEAP users: DEFAULT Realm == realm.org Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = `%{exec:/usr/sbin/ldap2vlan %{User-Name}` However, it only works for the so called "outter" identity. Any tip on how to make it work for the "inner" identity instead? -- Kolbjørn Barmen UNINETT Driftsenter
Kolbjørn Barmen wrote:
However, it only works for the so called "outter" identity. Any tip on how to make it work for the "inner" identity instead?
In 2.0, just put that into a virtual server for inner tunnels. See raddb/sites-available/inner-tunnel. In 1.x, do: # runs only in the inner tunnel DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, ... reply .... Alan DeKok.
participants (2)
-
Alan DeKok -
Kolbjørn Barmen