Using freeradius as proxy for EAP-SIM/EAP-AKA
Iliya Peregoudov
iperegudov at cboss.ru
Tue Jul 2 08:20:58 CEST 2013
On 01.07.2013 18:34, Alan DeKok wrote:
>> It's not possible for one proxy radius to send request to different EAP
>> SIM/EAP AKA radius server (based on certain criteria) ?
>
> When you're proxying an EAP packet, the ONLY criteria you have is the
> EAP identity. You do NOT have the EAP type available.
You can proxy Access-Requests to another server if User-Name matches
[^@]*@wlan.mncX.mccY.3gppnetwork.org. This another server should insist
on using EAP-SIM. If user tries to use another EAP method server should
reject the user.
More information about the Freeradius-Users
mailing list