Jonathan Gazeley wrote:
This is pretty much the config I had already. My eap.conf already specifies a virtual inner server. The only difference was that I had 'use_tunneled_reply = no', so I changed that to 'yes'.

My inner virtual server, 'inner-tunnel' already had an 'update reply' block identical to yours.

But with this change I still get the outer identities in my accounting logs. Any ideas what's up?

OK, I've solved my problem at least. I had to apply use_tunneled_reply = yes in the ttls section as well as the peap section. The majority of our users use peap so I mistakenly overlooked the ttls users.

Thanks for your help Arran and others.

Jonathan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to