help required - freerdius 3 - accounting to fortigate - user group name not received on fortigate

Alan DeKok aland at deployingradius.com
Sat Mar 11 19:33:54 UTC 2023


On Mar 11, 2023, at 2:29 PM, Eby Mani <eby_km at yahoo.com> wrote:
> 
> Many thanks Alan for detailed explanation, really appreciate.

  You're welcome.  RADIUS isn't that bad once you understand it.  But there's a lot to understand.

> Changing "inner-tunnel" value to "if (1) {" did the trick.
> 
> Two questions for my understanding, Would "use_tunneled_reply = yes" in peap section of eap.conf, do the same without changing values in "inner-tunnel" "if (0) {" ?.

  Yes.

> Are there any other mechanisms for wireless 802.1x that don't require "inner-tunnel' ?.

  EAP-PWD, among others.

  But EAP-TLS, PEAP and TTLS are the most widely used EAP methods.

  Alan DeKok.



More information about the Freeradius-Users mailing list