Setting VLAN from inner-tunnel

[Phil Mayers]

On 03/29/2010 02:25 PM, Ben Thompson wrote:
> On Mon, Mar 29, 2010 at 01:02:09PM +0100, Leighton Man wrote:
>>
>>>> Is there any way to make this work?
>>
>> I have it working with:
>>
>>
>> update reply {
>>                  Tunnel-Type = "VLAN"
>>                  Tunnel-Medium-Type = "IEEE-802"
>>                  Tunnel-Private-Group-Id = 141
>>            }
>
> Thanks, but unless I'm missing somthing I don't understand how this
> can this work from the inner tunnel without "update outer.reply" ?

See:

eap {
   ttls {
     use_tunneled_reply = yes
   }
}

...which saves the AVPs in the tunneled Access-Accept, and copies them 
to the final outer Access-Accept.