Hi,
I am using FreeRADIUS to proxy EAP-PEAP authentication as MSCHAPv2 to a
third-party RADIUS Server. (Terminating the outer tunnel at FreeRADIUS).
However, I need to send an AVP of "Framed-Ip-Address" to the third party
RADIUS server ( its a legacy server), for which I tried adding a realm
entry into attrs.pre-proxy:
-----------------------------------------------< SNIP
>-------------------------------------------------------------
#brokenas
# NAS-Port-Type == Ethernet
# Fall-Through = Yes
# The rest of this file contains the DEFAULT entry.
# DEFAULT matches with all realm names.
MyRealm.com
Framed-IP-Address := 192.168.50.12
Fall-Through = Yes
DEFAULT
User-Name =* ANY,
User-Password =* ANY,
CHAP-Password =* ANY,
CHAP-Challenge =* ANY,
MS-CHAP-Challenge =* ANY,
MS-CHAP-Response =* ANY,
EAP-Message =* ANY,
Message-Authenticator =* ANY,
State =* ANY,
NAS-IP-Address =* ANY,
NAS-Identifier =* ANY,
Proxy-State =* ANY
-----------------------------------------------< END
>-------------------------------------------------------------
But FreeRADIUS is not generating the "Framed-Ip-Address" in the outgoing
Access-Request (MSCHAPv2).
How can I make FR generate the AVP ?/
/Nitin
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
