Hi List<br><br>I've got radrelay replicating accounting packets from a primary radius server to a secondary radius server. The secondary radius server is capable of handling radius accounting/auth requests if NASes cannot reach the primary or the primary fails. I want to replicate packets from the secondary to the primary server in addition to replicating from primary to secondary, and so I tried setting up radrelay on the secondary identically to the one on the primary. The idea is to use radrelay as a simple mechanism to ensure that both servers have a copy of all the accounting packets.<br>
<br>However, when I test sending accounting packets to the secondary, the two systems go into some kind of circular loop, neither being smart enough to recognise a replicated auth packet when it sees one :-)<br><br>When I look at the incoming packet dumps I see accounting requests being replicated and responded to with ever-increasing numbers of Proxy-State attributes, until the radrelay instance crashes with a thread related error:<br>
<br>---<br>Sending Accounting-Request of id 76 to 10.1.1.112 port 1646<br> User-Name = "<a href="mailto:morpork@ankh.morpork.org">morpork@ankh.morpork.org</a>"<br> Service-Type = Framed-User<br> NAS-IP-Address = 196.7.321.6<br>
NAS-Identifier = "196.7.321.6"<br> NAS-Port = 1234<br> NAS-Port-Type = Async<br> Acct-Session-Id = "00001234"<br> Acct-Status-Type = Stop<br> Called-Station-Id = "123456789"<br>
Calling-Station-Id = "987654321"<br> Acct-Delay-Time = 5108<br> Acct-Session-Time = 1000<br> Acct-Input-Octets = 20000<br> Acct-Output-Octets = 30000<br> Proxy-State = 0x3231353235<br>
Proxy-State = 0x3236333439<br> Proxy-State = 0x3135343437<br> Proxy-State = 0x3136313331<br> Proxy-State = 0x35383236<br> Proxy-State = 0x3435313436<br> Proxy-State = 0x3532303932<br>
Proxy-State = 0x3137323331<br> Proxy-State = 0x39323331<br> Proxy-State = 0x3239343737<br> Proxy-State = 0x3435383237<br> Proxy-State = 0x3138313734<br> Proxy-State = 0x3239343138<br>
Proxy-State = 0x373430<br> Proxy-State = 0x393131<br>.<br>.<br>---<br><br>My question is, how would i configure two-way replication in a scenario like this, without the loops ?<br><br>Informational: <br><br>
Server 1/Primary : FreeRADIUS Version 2.1.10, for host i686-pc-linux-gnu, (Debian squeeze/sid)<br> Server 2/Secondary : FreeRADIUS Version 2.1.7, for host i686-redhat-linux-gnu (CentOS 5.5)<br><br>(both systems on the same physical network and subnet)<br>
<br>Thanks in advance,<br>Arch<br><br>