[RADIATOR] How to differentiate between an EAP request and a normal request ?

[Hugh Irvine]

Hello Markus -

You don't mention EAP - what devices are doing EAP?

If you have some EAP and some not, it probably makes more sense to do  
something like this:

.....

<Client n.n.n.n>
	Identifier TheSwitchThatNeedsSomethingSpecial
	.....
</Client>

......

<Handler TunnelledByTTLS = 1>
	.....
</Handler>

<Handler TunneledByPEAP = 1>
	......
</Handler>

<Handler EAP-Message = /.+>
	.....
</Handler>

<Handler Client-Identifier = TheSwitchThatNeedsSomethingSpecial>
	.....
</Handler>

<Handler>
	.....
</Handler>

.....

regards

Hugh


On 26 Sep 2009, at 05:38, Markus Moeller wrote:

> I have a switch which does administrative user authentication and  
> MAC address authentication via Radius.
>
> Is this the best way to treat the request differently ?
>
> <Handler EAP-Message=/.+/,Message-Authenticator=/.+/>
>   AuthBy MACAuth
> </Handler>
>
> <Handler>
>   AuthBy UserAuth
> </Handler>
>
> Thank you
> Markus
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator 
)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.