<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10pt"><div><span></span></div><div>I solved this issue with some prompting from Allen.</div><div><br></div><div><br></div><div>This is what I wanted</div><div>NAS send acct req to radius R1</div><div>R1 replicate acct req to R2</div><div>R1 respond to NAS</div><div><br></div><div>I simply could not get R1 to respond to the NAS when the replicate was in the configuration,</div><div>so the NAS would continue to send acct req packets to R1 and after a few trys, mark R1 as down.</div><div><br></div><div>It appears to be an issue with freeradius-2.1.12.</div><div>Upgrading to 2.2.4 seems to have fixed the issue.</div><div><br></div><div>Here are some details for those interested. I make no claims about this being the best way, </div><div>it's just "a way".</div><div><br></div><div>Building
a 2.2.4 rpm for my version of centos was a bit of trouble as well. I followed this and got it done:</div><div><a href="http://adriansmith.blogspot.co.uk/2014/01/building-freeradius-rpm-for-el5.html">http://adriansmith.blogspot.co.uk/2014/01/building-freeradius-rpm-for-el5.html</a></div><div>Follow the instructions but change the version and release in the spec file to values that match your</div><div>freeradius source rpm.</div><div>I had to add one additional step which was to add this line to the spec file:</div><div>%config(noreplace) /etc/raddb/panic.gdb</div><div><br></div><div>To configure radius to do a replicate (fire and forget) to an accounting server:</div><div><br></div><div>in sites-enabled/default</div><div>in the accounting { } section, add update control and replicate items like this:</div><div><br></div><div># daily<br> update control {<br> Replicate-to-Realm='Acct2'<br> }<br>
replicate</div><div> # Update the wtmp file</div><div><br></div><div><br></div><div>in proxy.conf, define a home_server, a pool, and a realm as follows</div><div>(use your IP and password values)</div><div><br></div><div>home_server_acct2 {<br> type = acct<br> ipaddr = 10.10.1.1<br> port = 1813<br> secret = testing123<br># src_ipaddr = 127.0.0.1<br> require_message_authenticator = yes<br> response_window = 20<br># no_response_fail = no<br> zombie_period = 40<br> revive_interval = 120<br> status_check = status-server<br> check_interval = 30<br> num_answers_to_alive = 3<br> max_outstanding = 65536<br> coa {<br> irt = 2<br> mrt = 16<br> mrc = 5<br> mrd = 30<br> }<br>}</div><div>home_server_pool acct2_pool {<br> type = fail-over<br> home_server = acct2<br>}<br>realm Acct2
{<br> acct_pool = acct2_pool<br>}<br></div><div><br clear="none"></div><div><br></div> </div></body></html>