accounting 'detail' file and EAP

[Alan DeKok]

"Kris Benson" <kbenson at sd57.bc.ca> wrote:
> Has anyone come up with a way to either A) ensure the outside username
> matches the inside one (guaranteeing the outside one isn't falsified) or
> B) log the accounting details with the tunnel information?

  Use the "class" attribute.  Set it to some value inside of the
tunnel, and set "use_tunneled_reply=yes".  You will then see it come
back in accounting packets outside of the tunnel.

  You will need to log the *inner* tunnel username & Class attribute,
to tie those two together, too.

  Alan DeKok.