Using freeRadius with OTP and gateway

[Alan DeKok]

Mercier Valentin wrote:
> But with some research we made, we have an another question. 
> We want to enable on free radius the Access Request --> Access Challenge
> --> Access Request --> Access Accept / Reject, with CHAP, but we don't
> know how to do this, and if you can help us it would be great. 

  You don't enable it.  The NAS is responsible for sending RADIUS
packets, and originating CHAP requests.  CHAP doesn't use a RADIUS
challenge-response, despite it's name.

> Because I read that usually with this kind of implementation the Access
> Challenge contain a "message" with which the client need to calculate
> the response. And for now that enough for us. 

  CHAP doesn't work that way.  The NAS sends a challenge to the client,
and receives a response.  It then sends challenge and response to the
RADIUS server.

  If you want challenge-response controlled by the RADIUS server, use
EAP-MD5.

  Alan DeKok.