Hi, > >This *is* proxying the inner tunnel; the inner tunnel auth is also EAP, and > >you're sending it to the remote server. > > Thanks, this is NOT what I want to do. I want to send the inner message, not > the tunnel and do PAP on the remote server.
okay. so you need to start by terminating the EAP on your server...so you need the current out of the box configuration and use the inner-tunnel...but then you want to then proxy the PAP authentication - that would be done with some 'update control' unlang alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

