EAP-Peap-MSchapv2 proxy from innertunnel
p.mayers at imperial.ac.uk
Thu Aug 29 17:38:53 CEST 2013
On 29/08/13 15:56, Robert Roll wrote:
> I guess I assumed the id: in the TCP dump below was the "EAP Response Identifier" maybe not ? Is there a different
> EAP response identifier ?
Yes, in the EAP-Message attribute (EAP packet)
> I actually have been running with debug radius -X. Obviously a lot longer output than just the TCP dump.
> That is why I first tried just the TCP dump. I guess I was also hoping somebody might have just
> had a thought about a common configuration issue...
TBH proxying EAP inner is not common at all; there have been bugs in
that area in the past.
Re-reading I notice that you're running 2.10 - upgrade. I'm pretty
certain that version has inner-eap proxy bugs. Go to 2.2.0.
More information about the Freeradius-Users