Jonathan Gazeley wrote:
This is pretty much the config I had already. My eap.conf already
specifies a virtual inner server. The only difference was that I had
'use_tunneled_reply = no', so I changed that to 'yes'.
My inner virtual server, 'inner-tunnel' already had an 'update reply'
block identical to yours.
But with this change I still get the outer identities in my accounting
logs. Any ideas what's up?
OK, I've solved my problem at least. I had to apply use_tunneled_reply =
yes in the ttls section as well as the peap section. The majority of our
users use peap so I mistakenly overlooked the ttls users.
Thanks for your help Arran and others.
Jonathan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html