Using freeradius as proxy for EAP-SIM/EAP-AKA
Ming-Ching Tiew
mctiew at yahoo.com
Tue Jul 2 08:56:56 CEST 2013
From: Iliya Peregoudov <iperegudov at cboss.ru>
To: freeradius-users at lists.freeradius.org
Sent: Tuesday, July 2, 2013 2:20 PM
Subject: Re: Using freeradius as proxy for EAP-SIM/EAP-AKA
On 01.07.2013 18:34, Alan DeKok wrote:
>>> It's not possible for one proxy radius to send request to different EAP
>>> SIM/EAP AKA radius server (based on certain criteria) ?
>>
>> When you're proxying an EAP packet, the ONLY criteria you have is the
>> EAP identity. You do NOT have the EAP type available.
>You can proxy Access-Requests to another server if User-Name matches
>[^@]*@wlan.mncX.mccY.3gppnetwork.org. This another server should insist
> on using EAP-SIM. If user tries to use another EAP method server should
>reject the user.
So this [^@]*@wlan.mncX.mccY.3gppnetwork.org is unique ? All the SIMs from the same mobile operator will have the same string and it will be different from another mobile operator ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130701/c4bb0226/attachment.html>
More information about the Freeradius-Users
mailing list