Using freeradius as proxy for EAP-SIM/EAP-AKA

Iliya Peregoudov iperegudov at cboss.ru
Tue Jul 2 08:20:58 CEST 2013


On 01.07.2013 18:34, Alan DeKok wrote:
>> It's not possible for one proxy radius to send request to different EAP
>> SIM/EAP AKA radius server (based on certain criteria) ?
>
>    When you're proxying an EAP packet, the ONLY criteria you have is the
> EAP identity.  You do NOT have the EAP type available.

You can proxy Access-Requests to another server if User-Name matches 
[^@]*@wlan.mncX.mccY.3gppnetwork.org. This another server should insist 
on using EAP-SIM. If user tries to use another EAP method server should 
reject the user.


More information about the Freeradius-Users mailing list