PEAP Inner-tunnel can't match a user in the "users" file with some check attributes

[Alan DeKok]

Difan Zhao wrote:

> I have an issue that whenever I have check attributes such as
> NAS-IP-Address or NAS-Port-Type, my PEAP fails… 

  Read raddb/eap.conf.  Look for "copy_request_to_tunnel"

> Everything works once I removed *NAS-IP-Address == "10.143.115.14"*.
> However I do need to check against from which switch/NAS the request is
> coming from… It seems that those attributes are outside of the “tunnel”.
> How can I copy them in the “tunnel” (does this make sense to you guys)??

  Read the configuration files.  This is documented.

  Alan DeKok.