Multiple EAP types

Alan DeKok aland at
Wed May 24 20:07:22 CEST 2006

gARetH baBB <hick.freeradius at> wrote:
> Ok, I've got to re-think this one, using hints how do I force a different 
> "default" EAP-Type, say based on IP ?
> I've tried
> DEFAULT	Client-IP-Address == "x.x.x.x"
>         EAP-Type := EAP-TTLS

  See "man 5 users".  You're setting EAP-Type as a reply, not a check
item.  You're also forcing TTLS *inside* of the TTLS tunnel, which is
wrong.  You want:

DEFAULT	Client-Ip-Address ==, FreeRADIUS-Proxied-To !*, EAP-Type := EAP-TTLS

  Alan DeKok.

More information about the Freeradius-Users mailing list