On Jul 24, 2018, at 12:49 PM, Алексей Морозенко <alexmorozenko@gmail.com> wrote:
I'm incorrect telling «reply», I mean after successfull authorization NAS sends accounting request to my RADIUS and then RADIUS proxies that request to FG-1 and FG-2
OK.
Doesn't matter what's it's name, by using files in preacct (pre-proxy) I insert additional attribute «Reply-Message» containing group name in accounting REQUEST from NAS. And further this modified accounting request being proxied to forti according realms. Am I right?
Yes. But only for PROXIED packets. The "pre-proxy" section doesn't change the *original* packet. And the "replicate" module only sends copies of the ORIGINAL packet. So you have to edit the original packet before calling replicate. Alan DeKok.