Using freeradius as proxy for EAP-SIM/EAP-AKA

[Ming-Ching Tiew]

If I understand you correctly, it means it is only possible to have ONE radius server which does EAP SIM/EAP AKA authentication in the entire chain of connections ? 
 
It's not possible for one proxy radius to send request to different EAP SIM/EAP AKA radius server (based on certain criteria) ?
 
How about Linux LVS ? Will it able to split the EAP-SIM/EAP-AKA request to different (final) server based on certain criteria ? 
 

________________________________
From: Muhammad Nadeem <mnadeem8327 at gmail.com>
To: Ming-Ching Tiew <mctiew at yahoo.com>; FreeRadius users mailing list <freeradius-users at lists.freeradius.org> 
Sent: Monday, July 1, 2013 3:10 PM
Subject: Re: Using freeradius as proxy for EAP-SIM/EAP-AKA



------>I am wondering if it is possible to proxy EAP-SIM/EAP-AKA authentication using FreeRadius ? 

yes it is possible , but you have to make sure that all requests of an EAP session are being entertain by the same server, ( as proxy can have multipile freeradius servers), Read proxy.config, it have some methods for proxy, some of these are for chap and one or two or of EAP.
similarly you can use some other methods like (Linux Virtual Server LVS) to accomplish this task.



On Mon, Jul 1, 2013 at 10:48 AM, Ming-Ching Tiew <mctiew at yahoo.com> wrote:


>
>Hi
>
>I am wondering if it is possible to proxy EAP-SIM/EAP-AKA authentication using FreeRadius ?
>
>Assuming brand X radius server has support for EAP-SIM/EAP-AKA, but it's located at the final end of the food chain, and in-between the brand X radius server and the Access point, there are 2 (or more) radius servers which are doing proxying ( and some other non-EAP SIM/EAP AKA work ).
>
>Will it work ? 
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>


-- 
Best Regards
Muhammad Nadeem
Muhammad Ali Jinnah University 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130701/6752c161/attachment-0001.html>