terminate eap-ttls

adrian.p.smith at bt.com adrian.p.smith at bt.com
Wed Jun 19 15:54:49 CEST 2013


>> What I really need to do is proxy the inner message to another Radius 
>> server which will do the authentication but I cannot get this to work.
>> Whatever I try, I always see an EAP-Message avp heading off to the 
>> remote server. I have looked at the proxy-inner-tunnel virtual server 
>> but am unsure how to use it.

>This *is* proxying the inner tunnel; the inner tunnel auth is also EAP, and you're sending it to the remote server.

Thanks, this is NOT what I want to do. I want to send the inner message, not the tunnel and do PAP on the remote server.

>If the remote server doesn't support EAP, you will need to investigate the:
>   proxy_tunneled_request_as_eap
>...option in eap.conf. This is set on the outer EAP type (peap or ttls)

Regards



More information about the Freeradius-Users mailing list