FreeRADIUS didn't send Tunnel type and Id in Access-Accept while using EAP-TTLS authentication

Alan DeKok aland at
Wed Aug 29 21:08:57 CEST 2018

On Aug 29, 2018, at 2:46 PM, Phani Siriki <yvsg.phanis at> wrote:
> I kept the information in the users file.
> /etc/raddb/users:
> "user"            Cleartext-Password := "whatever"
>                   Tunnel-Medium-Type:0 = IEEE-802 ,
>                   Tunnel-Type:0 = VLAN ,
>                   Tunnel-Private-Group-Id:0 = "101"

  That's good.

> Could you please let me know if this is not correct place? I assume
> md5 authentication works based on the users configured in this file.

  You should edit raddb/mods-available/eap.  Look for "use_tunneled_reply".  Read the documentation around it.

  And then set it to "yes".  That will fix the problem.

  Alan DeKok.

More information about the Freeradius-Users mailing list