tunneled_reply vs outer.session-state

[Alan DeKok]

On Apr 15, 2024, at 4:23 PM, Jack Carter <jack_carter94 at hotmail.com> wrote:
> I have spent the last two days trying to work this out… I’m trying to provide you with all the information I can think to be relevant and clearly getting it wrong… sorry about that but it’s not on purpose. 

  You were asked to read http://wiki.freeradius.org/list-help

  It gives specific, and detailed instructions for what information we need in order to help you.

  Please stop wandering around reading random documentation.  Go read that Wiki page.

> Would you be able to share a link to the documentation I need as I have been reading through this: https://freeradius.org/documentation/freeradius-server/4.0~alpha1/raddb/mods-available/eap.html which contains a dead link to the sites-available/inner-tunnel (https://freeradius.org/sites-available/inner-tunnel.adoc) plus can now see that the documentation is for 4.0-alpha1 according to the URL. now looking on GitHub.

  If you look at the first link you posted, there's a version number in the bottom left.  You can select version 3.2.4.  Which then has full documentation for 3.2.4.

  The server comes with complete, and extensive documentation.

> If I’m using the wrong test method are you able to assist with the correct one? If I run radtest from another instance (having set it up as a client) would that be a valid test?

  No.

  If you're trying to set "use_tunneled_reply", then you're trying to test EAP.  So.......... run tests with EAP.  Using the normal methods you would use to authenticate.

  It's not clear why you would want to test EAP authentication, and then use radtest and MS-CHAP.

  It's like trying to reach Dallas, but instead driving to New York.  And then wondering why you're not in Dallas.  It just doesn't make sense.

  Alan DeKok.