Config for proxying based on auth-protocol

[Alan DeKok]

Nitin Bhardwaj wrote:
> I want to configure FreeRADIUS to do the following two things:
> 
> (1)  Handle tunnel for PEAP authentication requested by any supplicant(s),
>       and do mschapv2 auth with another RADIUS server.  (Irrespective of
> the realm in the user-name)
> 
> (2) Transparently proxy all other non-PEAP requests to another RADIUS
> server (like LEAP, EAP-FAST etc etc).
>      ( Again, Irrespective of the realm in the user-name).

  That's impossible.

  By the time the server discovers that the client is using a particular
EAP method, the EAP session has started, and it's impossible to proxy it
to another RADIUS server.

  Alan DeKok.