Re: EAP-TTLS and accounting

2008-04-25 Thread Alan DeKok
Will Booth wrote: Is is possible to use TTLS with accounting messages after authentication? No. TTLS is an EAP method. EAP stands for Extensible Authentication Protocol. If you want the RADIUS packets to be encrypted, use IPSec. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: EAP-TTLS and accounting

2004-02-25 Thread Rok Pape
Hello Tom! :) Tom Rixom wrote: -Original Message- From: Rok Pape [mailto:[EMAIL PROTECTED] Has anyone managed to solve the problem with anonymous user accounting ? I've only found this message: http://lists.cistron.nl/pipermail/freeradius-users/2003-September/023835.html Just return

RE: EAP-TTLS and accounting

2004-02-25 Thread Tom Rixom
is not there then it would have to be added. If not then accounting (using anonnymous outer requests) will be impossible... Regards, Tom Rixom -Original Message- From: Rok Pape [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 25, 2004 10:05 AM To: [EMAIL PROTECTED] Subject: Re: EAP

Re: EAP-TTLS and accounting

2004-02-25 Thread Alan DeKok
=?windows-1252?Q?Rok_Pape=9E?= [EMAIL PROTECTED] wrote: use_tunneled_reply = yes ... This doesn't work as User-Name already exists in the outer tunnel. In the reply packet? It exists only if you added it in your configuration. If I add User-Name override to the

RE: EAP-TTLS and accounting

2004-02-24 Thread Tom Rixom
Hi, Just return the inner username back to the access point with the = Access-Accept=20 message and the access point (if it followes standard procedure) will = return the Accounting request with the correct inner username. This has been tested on Cisco 1100 and 1200. Regards, Tom Rixom