EAP-Peap-MSchapv2 proxy from innertunnel

Phil Mayers p.mayers at imperial.ac.uk
Thu Aug 29 17:38:53 CEST 2013

On 29/08/13 15:56, Robert Roll wrote:
>   I guess I assumed the   id: in the TCP dump   below was the "EAP Response Identifier"  maybe not ? Is there a different
> EAP response identifier ?

Yes, in the EAP-Message attribute (EAP packet)

>   I actually have been running with debug radius -X. Obviously a lot longer output than just the TCP dump.
> That is why I first tried just the TCP dump. I guess I was also hoping somebody might have just
> had a thought about a common configuration issue...

TBH proxying EAP inner is not common at all; there have been bugs in 
that area in the past.

Re-reading I notice that you're running 2.10 - upgrade. I'm pretty 
certain that version has inner-eap proxy bugs. Go to 2.2.0.

More information about the Freeradius-Users mailing list