Multiple EAP types

Alan DeKok aland at nitros9.org
Wed May 24 20:07:22 CEST 2006


gARetH baBB <hick.freeradius at gink.org> wrote:
> Ok, I've got to re-think this one, using hints how do I force a different 
> "default" EAP-Type, say based on IP ?
> 
> I've tried
> 
> DEFAULT	Client-IP-Address == "x.x.x.x"
>         EAP-Type := EAP-TTLS

  See "man 5 users".  You're setting EAP-Type as a reply, not a check
item.  You're also forcing TTLS *inside* of the TTLS tunnel, which is
wrong.  You want:

DEFAULT	Client-Ip-Address == 1.2.3.4, FreeRADIUS-Proxied-To !* 127.0.0.1, EAP-Type := EAP-TTLS

  Alan DeKok.




More information about the Freeradius-Users mailing list