Thank you Alan,
The intended Flow:
Packet comes in ... - for Access type, check if user might be authenticated - if OK, try to decide to send an Accounting packet to a Server on some attributes (in my case, VSA from downstream RADIUS Proxy Server)
Do you mean *create* an accounting packet, or forward *later* accounting packets for that session?
I mean *create* an Accounting Packet, if an Access Request comes in. This is will be used to provision a HTTP Proxy Platform about the upcoming isage of an IP address. Normally, it can be done using the AcctPacket, coming from the NAS, but in our current case, the HTTP Proxy Platform has problems to provision the information inside and we figured, that the payload might hit the HTTP Proxy before the MSISDN has been provisioned to the Proxy Process. Tweaking this Access Request to Acct Start Packet will give some more ms.
As far as I understood, the proxy module does - (only) proxy based on realm - in proxy module, normal local Logfiles won't be used
That's not true. You can proxy based on anything you want. See raddb/proxy.conf for documentation.
Sorry, that I'm missing something. I will have to check any Accounting Packet for some Attributes/Values. If a packet matches, it has to be proxied to a destination RADIUS Server. For instance: if NAS-IP-Address = 10.10.19.173 Called-Station-Id = "apn1.isp.de" Acct-Status-Type =* "" Then proxy to 10.200.1.1 if NAS-IP-Address = 10.10.18.120 Called-Station-Id = "apn1.isp.de" Acct-Status-Type =* "" Then proxy to 10.200.100.100 else do not proxy In that case, I have to check the attributes to decide, to which RADISU Server I have to send the packets. I found the section in the proxy.conf: # rlm_realm"). To manually proxy the request put this entry in the # "users" file: # # #DEFAULT Proxy-To-Realm := "realm_name" # Does it mean, that the lines un users file will do the work? DEFAULT NAS-IP-Address = 10.10.19.173, Called-Station-Id = "apn1.isp.de", Acct-Status-Type =* "", Proxy-To-Realm := "destination1" DEFAULT NAS-IP-Address = 10.10.18.120, Called-Station-Id = "apn1.isp.de", Acct-Status-Type =* "", Proxy-To-Realm := "destination2" Is manual proxying in unlang possible, using sites-available/default ?
You can proxy *and* log to detail files.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html