Arran Cudbard-Bell wrote: > > Wow this is going to speed stuff up so much !
We use this trick extensively. It works really well. > Ahh yes, I just got how this could work... because to deal with the > contents of the eap tunnel freeradius proxies it to itself... Yes. And if you set "copy_request_to_tunnel = yes" the attributes from the real packet get copied to the tunneled one - e.g. NAS-IP-Address, NAS-Port, etc. so you can still act on those attributes. > And though your only writing the reply attributes to the tunnel , when > the tunneled request comes back, > the attributes will be used in the main packet sent back to the NAS, > including the eap message from the proxied request ... Provided you have "use_tunneled_reply = yes" > > Is the proxying to self new behaviour ? No > > I know the Authz-Type and Auth-Type stuff is only in CVS so you must not > have been able to do it in 1.1* ? Erm, no. They've been around a long time. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html