Terminate PEAP on freeradius then proxy MSCHAPv2 to NPS

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Fri Jan 25 15:16:39 CET 2013


> >Could someone tell me if it is possible to terminate PEAP on a
> >freeradius server then proxy the request to an NPS server using MSCHAPv2?
> Yes. Simply set "Proxy-To-Realm" in inner-tunnel/authorize, and
> FreeRADIUS will proxy the packets.

..and be aware that any clients that have strict cryptobindings enabled may
not be happy that the authentication was not done by the RADIUS server which
terminated the EAP tunnel.


More information about the Freeradius-Users mailing list