> >>Have different names for a server realm and user domain so you can choose >>when to proxy. > >Could you please leave me a hont how to do that. >
Just split user and server realms. Make users realm (SECURACCESS) a local one (you have instructions in proxy.conf how yo make local realms. And rename the realm you are proxying to, for instance SECURE (change Proxy-To-Realm stetement too). That way the outer tunnel will be processed locally and inner remotely. >Why doesn´t it do PAP? When the connection reach the home server it´s >encrypted? > Because you are proxying the EAP request. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
