<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">ermmm<div><br></div><div>whereabouts in </div><div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;">/usr/local/src/freeradius-server-3.0.0/raddb/sites-available/tls ?</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;"><br></span></div><div style="margin: 0px;"><font face="Menlo"><span style="font-size: 14px;">Looing at file,there’s </span></font></div><div style="margin: 0px;"><font face="Menlo"><span style="font-size: 14px;"><br></span></font></div><div style="margin: 0px;"><font face="Menlo"><span style="font-size: 14px;"><br></span></font></div><div style="margin: 0px; font-size: 24px; font-family: Menlo;"><br></div><div style="margin: 0px;"><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;">listen {</span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"> ipaddr = *</span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"> port = 2083</span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"> type = auth</span></div><div style="font-family: Menlo; margin: 0px; min-height: 28px;"><span style="font-size: 14px;"><br></span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"> # For now, only TCP transport is allowed.</span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"> proto = tcp</span></div><div style="font-family: Menlo; margin: 0px; min-height: 28px;"><span style="font-size: 14px;"><br></span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"> # Send packets to the default virtual server</span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"> virtual_server = default</span></div><div style="font-family: Menlo; margin: 0px; min-height: 28px;"><span style="font-size: 14px;"><br></span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"> clients = radsec</span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"> tls {</span></div><div style="margin: 0px;"><font face="Menlo"><span style="font-size: 14px;">…… </span></font></div><div style="margin: 0px;"><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;">}</span></div><div style="margin: 0px; font-family: Menlo; min-height: 28px;"><span style="font-size: 14px;"><br></span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;">clients radsec {</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;"> client 127.0.0.1 {</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;"> ipaddr = 127.0.0.1</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;"> proto = tcp</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;"> secret = testing123</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;"> }</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;">}</span></div><div style="margin: 0px; font-family: Menlo; min-height: 28px;"><span style="font-size: 14px;"><br></span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;">listen {</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;"> ipaddr = 127.0.0.1</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;"> port = 4000</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;"> type = auth</span></div><div style="margin: 0px; font-family: Menlo;"><span style="font-size: 14px;">}</span></div><div><br></div></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"><br></span></div><div style="font-family: Menlo; margin: 0px;"><span style="font-size: 14px;"><br></span></div><div style="font-family: Menlo; font-size: 24px;"><br></div></div><div><div>On 7 Nov 2013, at 16:18, Alan DeKok <<a href="mailto:aland@deployingradius.com">aland@deployingradius.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Alex Sharaz wrote:<br><blockquote type="cite">Quick question about setting up radsec and FR3. When I was playing with RADSEC and Radiator, a permanent link was established between two radsec endpoints ( had radsec/ipv4 -> Ubuntu VM out in the cloud and then radsec/ipv6 -> Radiator on OS X machine at home). Should FR do this as well, or does it just establish a connection whenever it needs one?<br></blockquote><br> The server establishes connections only when needed.<br><br><blockquote type="cite">Had some sort of success with radsecproxy and FR3 but then FR3 complained about exceeding max client connections (>16)<br></blockquote><br> That's why the config files are editable. You can change that. See<br>the "listen" section of raddb/sites-available/tls.<br><br> Alan DeKok.<br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br></div></body></html>