configuring proxy base on eap-type

[Alan DeKok]

Fred MAISON wrote:
> Yes, how can I do that ? May I activate proxy-inner-tunnel site along
> with inner-tunnel site ? 

  No.  It's an example.

  You can set "Proxy-To-Relam" to force proxying.  See raddb/proxy.conf

>>   So... figure out who's supposed to do EAP-JUAC, 
> Yes, but based on what ? I currently use a real, but this can be changed
> by end-user to bypass JUAC host checking capabilities ...

  Check the user name?  Put the users into groups?

  This shouldn't be hard.  You are *already* determining which users do
JUAC, and which don't: the machines are configured to do it.

  Now just write down those rules for FreeRADIUS..

> Yes, it's what I need, but I don't fully master how to do that. May be
> the first point related to  enable site proxy-inner-tunnel ?
> If so, it seem to be very unselective (I meen ALL protocols doing
> inner-tunnel will be proxied to UAC, leaving only EAP-LEAP on
> freeradius. This could be a good solution for me.

  So... configure that.

  Alan DeKok.