On 31 Aug 2011, at 08:11, Arran Cudbard-Bell wrote: > > On 31 Aug 2011, at 04:37, gary wrote: > >> Hi All >> I have NAS client which support WISPr standard working with freeradius >> 2.1.10+MySQL 5.5 install on Fedora OS. >> I create my test certificate and configure EAP-TLS/PEAP authentication well >> in my setup. >> I am using WINDOWS XP as client pc it can pass authentication but freeradius >> can not reply correct attribute I configured such as bandwidth control. >> I noticed in the reply attribute the vendor is Microsoft not WISPr. >> I wonder if this is WINDOWS default setting how can I modify so that FR can >> reply the correct attribute I configured? > > Look in the dictionary file for your NAS vendor and figure out what the > actual attribute name is for the reply attribute you're trying to send. > > The name of a VSA is just there to make it easier to extract and manipulate > attributes, it has no effect on the contents of the packet. So if you insert > a VSA and it comes up as a Microsoft Vendor and this is not what you > intended, then there's a naming conflict and the other Vendors VSAs will have > been renamed. >
Of course if you're adding attributes in the inner tunnel you'll have to make sure tunnelled reply is set to yes in eap.conf for the relevant EAP methods. Arran Cudbard-Bell a.cudba...@freeradius.org RADIUS - Half the complexity of Diameter
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
