freeRadius 2.x

[Phil Mayers]

On 12/20/2012 05:14 PM, rosect190 at yahoo.com wrote:
> It is noticed that some VSAs are sent with Access-Challenge but not with
> Access-Accept when PEAP is used.
>
> Is there a way to configure the server such that those attributes are
> sent with Access-Accept?

"use_tunneled_reply = yes" under the "peap {}" section in "eap.conf".

In addition, if you're seeing the VSAs in Access-Challenge, it's most 
likely because you're returning them in the "authorize" second. Instead, 
consider returning them in the "post-auth" section of the "inner-tunnel" 
server, combined with the config above.

There are other options, depending on your needs.