One more sample virtual server. At this rate, we'll have
authoraland <aland>
Fri, 2 Nov 2007 23:57:40 +0000 (23:57 +0000)
committeraland <aland>
Fri, 2 Nov 2007 23:57:40 +0000 (23:57 +0000)
something resembling "documentation" real soon now.

raddb/sites-available/proxy-inner-tunnel [new file with mode: 0644]

diff --git a/raddb/sites-available/proxy-inner-tunnel b/raddb/sites-available/proxy-inner-tunnel
new file mode 100644 (file)
index 0000000..5e3190d
--- /dev/null
@@ -0,0 +1,37 @@
+# -*- text -*-
+######################################################################
+#
+#      This is a virtual server that handles *only* inner tunnel
+#      requests for EAP-TTLS and PEAP types.
+#
+#      $Id$
+#
+######################################################################
+
+server proxy-inner-tunnel {
+
+#
+#  This example is very simple.  All inner tunnel requests get
+#  proxied to another RADIUS server.
+#
+authorize {
+       #
+       #  Do other things here, as necessary.
+       #
+       #  e.g. run the "realms" module, to decide how to proxy
+       #  the inner tunnel request.
+       #
+
+       update control {
+               #  You should update this to be one of your realms.
+               Proxy-To-Realm := "example.com".
+       }
+}
+
+#
+#  Note that we do NOT have pre/post-proxy sections here.  For various
+#  reasons, the pre/post-proxy stages are run in the context of the
+#  OUTER tunnel session, and not the INNER tunnel session.
+#
+
+}