# -*- text -*-
##
## sites-available/inner-tunnel -- EAP inner tunnel virtual server
##
## Managed by Ansible — do not edit manually.
##

server inner-tunnel {

listen {
	ipaddr = 127.0.0.1
	port = 18120
	type = auth
}

authorize {
	filter_username
	suffix
	update control {
		&Proxy-To-Realm := LOCAL
	}
	sql
	chap
	mschap
	pap
	eap {
		ok = return
	}
	cache {
		ok = return
	}
	files
	expiration
	logintime
}

authenticate {
	Auth-Type PAP {
		pap
	}
	Auth-Type CHAP {
		chap
	}
	Auth-Type MS-CHAP {
		mschap
	}
	mschap
	eap
}

session {
}

post-auth {
	-sql
	cache

	Post-Auth-Type REJECT {
		-sql
		attr_filter.access_reject
		update outer.session-state {
			&Module-Failure-Message := &request:Module-Failure-Message
		}
	}
}

pre-proxy {
}

post-proxy {
	eap
}

}