Bertalan Voros wrote: > Is it possible to proxy requests based on Auth-Type?
Yes, but you don't want to do that. > If I uncomment suffix in sites-enabled/default then it's reversed, > mschap gets proxied but PEAP requests doesn't get sent through the inner > tunnel. You need to *conditionally* run the "suffix" module then. In the sites-enabled/default, do: authorize { ... if (!EAP-Message) { suffix } ... } That should solve the problem quite nicely. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html