Bertalan Voros wrote:
> Is it possible to proxy requests based on Auth-Type?

  Yes, but you don't want to do that.

> If I uncomment suffix in sites-enabled/default then it's reversed,
> mschap gets proxied but PEAP requests doesn't get sent through the inner
> tunnel.

  You need to *conditionally* run the "suffix" module then.  In the
sites-enabled/default, do:

authorize {
        ...
        if (!EAP-Message) {
                suffix
        }
        ...

}

  That should solve the problem quite nicely.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to