18 Oct
2012
18 Oct
'12
5:21 a.m.
On 18/10/12 07:18, Vladimir Grujić wrote:
The scenario is that radius is behind load balancer which advertizes it's public ip address and forward packets to another ip address on radius (which has different ip) . Advertized public ip address on radius is binded to lo:0 interface. Hence the need for udpfromto. This is a setup to have HA cluster of radius servers and only one advertized ip for the NAS.
We run a virtually identical setup, and don't need udpfromto. Instead, we bind the "listen" section to the virtual IP. Replies are always sent out of the socket they came in on, so the source IP "just works".