问题
how can I configure FreeRADIUS to proxy the PAP request inside an EAP-TTLS tunnel? Client sends a EAP-TTLS with PAP as inner protocol to freeradius server. I want to proxy the PAP request to another RADIUS server which understands only PAP. How could I configire freeradius for this.
回答1:
Ensure in the eap module configuration
proxy_tunneled_request_as_eap = no
Configure your proxy realm in proxy.conf
Set proxy realm in inner server
update control {
Proxy-To-Realm := <realm>
}
回答2:
Just putting the solution steps in case someone needs it.
Add realm in proxy conf file (/sbin/proxy.conf): realm MYAUTH { type = radius authhost = Radius_server_IP:Port] secret = RadiusSharedSecret nostrip }
Modify virtual server information in /etc/raddb/mods-enabled/eap.conf: ttls{ ......... ......... virtual_server = "proxy-inner-tunnel" }
In /etc/raddb/sites-enabled creates a softlink proxy-inner-tunnel pointing to /etc/raddb/sites-available/proxy-inner-tunnel. Modify proxy-inner-tunnel to add the proxy realm: authorize {
update control { &Proxy-To-Realm := "MYAUTH" } }
来源:https://stackoverflow.com/questions/33864953/how-to-configure-freeradius-to-proxy-the-pap-request-inside-an-eap-ttls-tunnel