On Apr 20, 2020, at 10:33 AM, belyj@belyj.eu wrote:
Im trying to proxy NAS requests to freeradius via tcp. Authentication works, but accounting packets are still arriving via udp to radius.
NAS < udp > FR proxy < tcp > FR, is it possible? or am i missing something
It's possible.
radiusd: FreeRADIUS Version 3.0.21 (git #af428abda), for host x86_64-pc-linux-gnu FreeRADIUS Version 3.0.21
proxy.conf ... sites-enabled/default ...
And a piece of a packet capture.
12:53:35.758094 IP (tos 0x0, ttl 57, id 53740, offset 0, flags [none], proto UDP (17), length 204) 192.168.1.1.62825 > 192.168.1.100.2084: [udp sum ok] UDP, length 176 12:53:36.760526 IP (tos 0x0, ttl 57, id 53771, offset 0, flags [none], proto UDP (17), length 178) 192.168.1.1.17830 > 192.168.1.100.2084: [udp sum ok] UDP, length 150
If only there was some kind of additional information which would tell you what the server is doing. http://wiki.freeradius.org/list-help Alan DeKok.