Virtual Server Pool Problem

8 Jun 2012

      Hello all,

I am attempting to setup a FreeRADIUS server to listen only on one IP
address, but have two virtual servers. At the moment I am testing with
simple servers, one that accepts and one that rejects. I have a freeradius
server that is dependent on another server, and want to provide an alternate
authentication method when the server is down. I sort of have an idea but i
feel far from getting to a working setup. The following is part of my setup
configuration.

listen {
        type = auth
        ipaddr = 192.168.100.251
        port = 1812
        virtual_server = primary
}

listen {
        ipaddr = 192.168.100.251
        port = 1813
        type = acct
        virtual_server = primary
}

server primary {
  authorize {
    update control {
      Auth-Type := Reject
    }
  }
  ...
}

server secondary {
  authorize {                                                                                                                                                                      
    update control {
      Auth-Type := Accept
    }
  }
}

proxy server {
  default_fallback = yes
}

home_server first {
  type = auth+acct
  ipaddr = 192.168.100.251
  #virtual_server = primary
  port = 1812
  secret = secret
  require_message_authenticator = no
  ...
}

home_server second {
  virtual_server = secondary
  type = auth+acct
  port = 1822
  secret = secret
}

home_server_pool my_auth_failover {
        type = fail-over
        home_server = first
        home_server = second
}

This is the result from radtest

[root@chive raddb]# radtest test test123 192.168.100.251 1812 secret                                                                                                          
Sending Access-Request of id 239 to 192.168.100.251 port 1812
        User-Name = "test"
        User-Password = "test123"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 1812
rad_recv: Access-Reject packet from host 192.168.100.251 port 1812, id=239,
length=20
[root@chive raddb]#

This is the result after I use radmin to set home_server as dead (set
home_server state 192.168.100.251 812 dead):

[root@localhost raddb]# radtest test test123 192.168.100.251 1812 secret
Sending Access-Request of id 1 to 192.168.100.251 port 1812
        User-Name = "test"
        User-Password = "test123"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 1812
rad_recv: Access-Reject packet from host 192.168.100.251 port 1812, id=1,
length=20
[root@localhost raddb]#

It is my understanding that once a home_server is dead, it tries the next
one, but here I see that port 1812 is still used instead of 1822.

Your help is greatly appreciated.

Thanks,
Manny 

-----
Test.
--
View this message in context: http://freeradius.1045715.n5.nabble.com/Virtual-Server-Pool-Problem-tp571361...
Sent from the FreeRadius - User mailing list archive at Nabble.com.

Virtual Server Pool Problem

manny