Hi Phil, Thanks a lot for the quick response.
I need this for PEAP with EAP protocol inside the tunnel, like EAP-MSCHAPv2. Again, The device MUST reject the connection as EAP is not completed, but the ROUTER needs that Access-Accept, in order to be able to redirect user to portal. Can this be done? Thanks in advance. Andras On 30/08/12 11:12, Andras Ionut wrote: > Thanks a lot for the quick answer Arran. > > That is exactly wahat I need - sending an Access-Accept and maybe > EAP-Success if possible. I don't care if the device will not connect. > I only need Access-Accept in order for the CISCO router to assign an > IP to the client and redirect it to portal using L4_Redirect. You're not understanding what Arran said. This is an FAQ: http://wiki.freeradius.org/FAQ#How-do-I-permit-access-to-any-user-regardless-of-password%3F In short: many (most?) devices will drop the connection if auth fails, including a missing or invalid final response in the inner challenge-response auth. So, forcing an accept might work for the router. But the client will probably disconnect. > > Can this be done? If yes, can you please be more explicit on how to do > this in freeradius? See the FAQ entry above. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
