EAP authentication and DHCP
HernĂ¡n Freschi
hjf at hjf.com.ar
Sun Sep 27 17:16:54 CEST 2015
On Sun, Sep 27, 2015 at 11:13 AM, Alan DeKok <aland at deployingradius.com> wrote:
>
>> By default the post-auth module writes two
>> records to the radpostauth table: one, from the anonymous identity with the
>> Calling-Station-ID set to the MAC address, and another, for the tunneled
>> identity, with an empty calling ID.
>
> You can fix that by editing the configuration files. That's why they're text.
Right now the rule I'm using is " if (!request:Calling-Station-Id ) "
which seems to work for my AP, but is there a better attribute i
should be matching on? Some sort of
"This-Is-An-Internal-Tunnel-EAP-Request==Yes" ?
Or better yet: how can I dump the attributes in a request when debugging?
More information about the Freeradius-Users
mailing list