Proxy CHAP into EAP session

[Alan DeKok]

On Sep 22, 2017, at 1:54 PM, Jonathan <huffelduffel at gmail.com> wrote:
> 
> I'm looking for a way on how to proxy / recreate a session into an EAP
> session.
> 
> STEPS
> 1
> normal RADIUS session with CHAP password
> Received by RADIUS server1
> 
> 2
> RADIUS server1 converts/proxies it into a second RADIUS request but as an
> EAP session towards a RADIUS server2 which handles the full request.

  It's not possible.

  It may be theoretically possible to convert CHAP to EAP-MD5, but that isn't very useful.

  It may also be theoretically possible to tunnel CHAP inside of EAP-TTLS, but that also isn't useful.  And FreeRADIUS can't do it.

  The better question is why are you trying to do this?

  Alan DeKok.