proxy implementation

[srithar jeevadurai]

Hi Matthew,

I have to run proxy radius on same host and run multiple home servers on
same host (for a poc that we are trying).

So Proxy has to be a plain proxy to auth+acct request and forwards it to
home servers.

Since Home servers are running on same host, we have to change the default
port for each home server radius.

 sites-enabled/default - is has authentic, authorization and accounting
block, apart from post_proxy and pre_proxy blocks.
There is no info on changing the default port from 1812 (and 1813) to
different one.

1) I am installing new freeradius setup for proxy and going to modify only
proxy.conf and then modifying sites-enabled/default
and sites-enabled/inner-tunnel.

the current running Radius stack (connect to NAS directly) has to be
modified to listen different ports from default ports (1812/13).



Regards,
Srithar

On Mon, Dec 21, 2015 at 7:43 PM, Matthew Newton <mcn4 at leicester.ac.uk>
wrote:

> On Mon, Dec 21, 2015 at 06:55:53PM +0530, srithar jeevadurai wrote:
> > *2nd change includes: *
> >
> > only change the etc/raddb/sites-enabled/inner-tunnel
> >
> > change it as below
> >
> > *listen {*
> > *       ipaddr = 127.0.0.1*
> > *       port = 18220*
> > *       type = auth*
> > *}*
>
> probably sites-enabled/default, not inner-tunnel.
>
> > Please let me know if any other configuration change that I am missing in
> > the step 1 and 2.
>
> Update relevant port in proxy.conf on proxy servers.
>
> But why change the port number when proxying? Seems a bit weird.
>
> Matthew
>
>
> --
> Matthew Newton, Ph.D. <mcn4 at le.ac.uk>
>
> Systems Specialist, Infrastructure Services,
> I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
>
> For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html




-- 
Regards,
Srithar Durairaj
Alternate Mail I.D: srijeevadurai1 at yahoo.co.in
Mobile: +919886251852