Reply-message and supplicant

Alan DeKok aland at deployingradius.com
Mon Jun 8 12:35:03 CEST 2009


A.L.M.Buxey at lboro.ac.uk wrote:
> could reply messages be used with some smart server-end code to provide 
> a data communication channel? ie user A has code that attempts to use EAP
> with special username coding...the remote server is designed
> to throw responses in EAP messages...which the modified supplicant
> on the client can then extract? this could tunnel traffic through
> an 802.1X restricted network?

  For TTLS, just use vendor-specific attributes inside of the TTLS tunnel.

  It shouldn't be too hard to modify the open source supplicants to look
for a message, and do *something* with it.

  Alan DeKok.



More information about the Freeradius-Users mailing list