Proxy based on auth type?

Alan DeKok aland at
Fri Feb 1 15:33:33 CET 2013

Bertalan Voros wrote:
> Is it possible to proxy requests based on Auth-Type?

  Yes, but you don't want to do that.

> If I uncomment suffix in sites-enabled/default then it's reversed,
> mschap gets proxied but PEAP requests doesn't get sent through the inner
> tunnel.

  You need to *conditionally* run the "suffix" module then.  In the
sites-enabled/default, do:

authorize {
	if (!EAP-Message) {


  That should solve the problem quite nicely.

  Alan DeKok.

More information about the Freeradius-Users mailing list