[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: proxy auth and acct to different destination
From:       Matthew Newton <mcn () freeradius ! org>
Date:       2022-07-25 8:38:27
Message-ID: 4e2840c0-62d7-6b95-34a3-126633ad651f () freeradius ! org
[Download RAW message or body]



On 25/07/2022 02:47, Bill Yuan wrote:
> in the proxy.conf, we can config as below to handle realm "ABC"
> realm ABC{
>   authhost = radius.example.com:1812
>   accthost = radius.example.com:1813
>   secret = testing123
> }
> which means proxy to different destinations, but with the same secret.
> what if we have different shared secrets for auth and acct server?

Use a pool, there are examples in proxy.conf


home_server home-auth1 {
   type = auth
   ipaddr = 1.2.3.4
   secret = testing123
}

home_server home-acct1 {
   type = acct
   ipaddr = 5.6.7.8
   secret = testing456
}

home_server_pool home-auth-pool {
   home_server = home-auth1
}

home_server_pool home-acct-pool {
   home_server = home-acct1
}

realm ABC {
   auth_pool = home-auth-pool
   acct_pool = home-acct-pool
}


-- 
Matthew
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[prev in list] [next in list] [prev in thread] [next in thread]