EAP authentication and DHCP

HernĂ¡n Freschi hjf at hjf.com.ar
Sun Sep 27 17:16:54 CEST 2015


On Sun, Sep 27, 2015 at 11:13 AM, Alan DeKok <aland at deployingradius.com> wrote:

>
>> By default the post-auth module writes two
>> records to the radpostauth table: one, from the anonymous identity with the
>> Calling-Station-ID set to the MAC address, and another, for the tunneled
>> identity, with an empty calling ID.
>
>   You can fix that by editing the configuration files.  That's why they're text.

Right now the rule I'm using is "  if (!request:Calling-Station-Id ) "
which seems to work for my AP, but is there a better attribute i
should be matching on? Some sort of
"This-Is-An-Internal-Tunnel-EAP-Request==Yes" ?

Or better yet: how can I dump the attributes in a request when debugging?


More information about the Freeradius-Users mailing list