Proxy EAP - TLS Nesting.

Alan DeKok aland at
Wed Apr 28 22:01:50 CEST 2010

brisstony21 at wrote:
> I have to proxy all authentication request to virtual server (not just PEAP). We
> have differents kind of internals users (student, staff, guest, ...). Each of
> them is managed by one virtual server associated to one realm, example : for the
> student :

  So... are you sure it's just PEAP (MSCHAP), and not PEAP-TLS?

> I can only specify one IP adresse and one port in NAS configuration (wired dot1x
> and wireless network) and I will use the proxy port (1812).
> Maybe there is another method to do that... But I think that use a proxy is the
> best way.

  You've described your configuration at a *very* high level.  I still
have no idea what you're trying to do, or what is actually happening in
your system.

  Perhaps explaining things in detail would help, or showing the output
of debug mode as suggested in the FAQ, README, INSTALL, "man" page, web
page, configuration files, and daily on this list.

  Alan DeKok.

More information about the Freeradius-Users mailing list