accounting proxy via tcp

[Alan DeKok]

On Apr 20, 2020, at 10:33 AM, belyj at belyj.eu wrote:
> 
> Im trying to proxy NAS requests to freeradius via tcp. Authentication works, but accounting packets are still arriving via udp to radius.
> 
> NAS < udp > FR proxy < tcp > FR, is it possible? or am i missing something

  It's possible.

> radiusd: FreeRADIUS Version 3.0.21 (git #af428abda), for host x86_64-pc-linux-gnu
> FreeRADIUS Version 3.0.21
> 
> proxy.conf
> ...
> sites-enabled/default
> ...
> 

  And a piece of a packet capture.

> 12:53:35.758094 IP (tos 0x0, ttl 57, id 53740, offset 0, flags [none], proto UDP (17), length 204)
>    192.168.1.1.62825 > 192.168.1.100.2084: [udp sum ok] UDP, length 176
> 12:53:36.760526 IP (tos 0x0, ttl 57, id 53771, offset 0, flags [none], proto UDP (17), length 178)
>    192.168.1.1.17830 > 192.168.1.100.2084: [udp sum ok] UDP, length 150

  If only there was some kind of additional information which would tell you what the server is doing.

  http://wiki.freeradius.org/list-help

  Alan DeKok.