[RADIATOR] 802.1x , EAP error

[Jeffrey Lee]

Hi Alan,

Thanks for the reply... was referring to proxy for EAP authentication, not
the usual proxy AAA.


Hi Heikki,

It seems that if I forward all EAP request to foreign AAA, I won't be able
to capture the accounting logs since my proxy server won't be able to see
the inner request.

Would setting up EAP authentication on my AAA be a better option and only
forward AAA (without EAP) to the foreign AAA?
If so, how do I configure this, assuming it's EAP-PEAP ?


Thanks,
Jeff



On Sat, Mar 30, 2013 at 10:24 PM, <A.L.M.Buxey at lboro.ac.uk> wrote:

> Hi,
>
> >    If I'm trying to relay an 802.1x authentication to another proxy AAA
> >    server, can I just proxy without processing EAP request (to find the
> inner
> >    EAP request info?)
>
> yes... eg
>
> <Handler Realm = "realm.org">
>         <AuthBy RADIUS>
>                 <Host 192.168.1.1>
>                 Secret topsecret
>                 </Host>
>                 <Host 192.168.4.5>
>                 Secret youllnever know
>                 </Host>
>         </AuthBy>
> </Handler>
>
>
> or just a plain
>
> <Realm realm.org> wrapper
>
>
> read proxy.cfg and proxyalgorithm.cfg in goodies
>
> alan
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.open.com.au/pipermail/radiator/attachments/20130331/7d0440d4/attachment.html