Default vs Inner-tunnel concepts

Alan DeKok aland at
Thu Oct 19 16:08:14 CEST 2017

On Oct 19, 2017, at 9:51 AM, Tom Yard <tomyyard at> wrote:
> OK Alan, thank you....but suppose I need to create a second custom virtual
> server for eap with TLS too, called for example "wifi" and
> "wifi-tunnel"....where do I have to define them in order to be read???

  The better question is why do you need to do that, and what are you trying to do?

> client {
>        secret                = secret
>        shortname             = WLC
>        nastype               = cisco
>        virtual_server        = wifi
>        virtual_server       = wifi-tunnel
> }
> Is this OK ?

  No.  You can't list "virtual_server" twice, and expect it to magically work.  The default configuration doesn't do this, either.

  The references to "inner-tunnel" are in raddb/mods-available/eap.  Go read the comments there to see how it works.

  Alan DeKok.

More information about the Freeradius-Users mailing list