Proxy based on auth type?

[Alan DeKok]

Bertalan Voros wrote:
> Is it possible to proxy requests based on Auth-Type?

  Yes, but you don't want to do that.

> If I uncomment suffix in sites-enabled/default then it's reversed,
> mschap gets proxied but PEAP requests doesn't get sent through the inner
> tunnel.

  You need to *conditionally* run the "suffix" module then.  In the
sites-enabled/default, do:

authorize {
	...
	if (!EAP-Message) {
		suffix
	}
	...

}

  That should solve the problem quite nicely.

  Alan DeKok.