Proxy and copy-acct-to-home-server

Alan DeKok aland at deployingradius.com
Sun Mar 7 09:38:22 CET 2010


Etienne Pretorius wrote:
> Lets say I have 3 FreeRadius servers (A,B,C) and I would like to sync
> the accounting packet between them.
> 
> On server A, I created copy-acct-to-home-server for B and C;
> On server B, I created copy-acct-to-home-server for A and C;
> On server C, I created copy-acct-to-home-server for A and B;
...
> I desire that A only sends copies to B and C - while B and C do not send
> those packets back to A or to each other respectively.
> Like wise with the other two servers ( ie when one of the servers I
> administer proxies a packet, the receiver should not proxy it any
> further ).

  Yes, that makes sense.

> How would I define this? Would I need one home_server_pool with both
> home_servers defined, but defined with what "type="?

  Read the documentation on "type" for home_server_pools.  There is
nothing that fits what you want.

> Mind if I use multiple pools then I need both in each of my realm
> statements... is that even allowed.

  No.

  What you need is a simple rule:

	if NOT from (other two servers)
		copy to other two servers

  e.g.

	if ((Packet-Src-IP-Address != A) && (Packet-Src-IP-Address != B)) {
		copy-acct-to-home-server-A
		copy-acct-to-home-server-B
	}

  Alan DeKok.



More information about the Freeradius-Users mailing list