copy-acct to home server from specific NAS
Hi Freeradius-users We have configured copy-acct-to-home-serverA and copy-acct-to-home-serverB in our radius Configured two realms, two home_servers and have two detail files. This works fine it copies the accounting hitting FR to the two home_servers. However we have 20NAS servers sending accounting to the FR and we only want to copy-acct from two of the NAS servers How can we configure FR to only copy acct to home servers when it comes from NAS1 and NAS2? We can identify the NASes by Called-Station-Id == nas1 We have tried using check-items like below, but it doesn't work as we expected, nothing is sent to the home server. server copy-acct-to-home-serverA { listen { type = detail update control { Called-Station-Id == nas1, Proxy-To-Realm := realmA } I guess we are doing something wrong with check items and attributes? Server: Freeradius version 2.2.0 Ubuntu 12.04 BR /Daniel
Johansson, Daniel wrote:
However we have 20NAS servers sending accounting to the FR and we only want to copy-acct from two of the NAS servers
How can we configure FR to only copy acct to home servers when it comes from NAS1 and NAS2?
You can set up a separate virtual server for those two NASes. See raddb/sites-available/README.
We have tried using check-items like below, but it doesn't work as we expected, nothing is sent to the home server.
server copy-acct-to-home-serverA { listen { type = detail update control { Called-Station-Id == nas1, Proxy-To-Realm := realmA }
I guess we are doing something wrong with check items and attributes?
Yes. See "man unlang". You can't put an "update" section there. The documentation specifically says that the "update" sections can ONLY go in a virtual server, authorize, authenticate, etc. Alan DeKok.
On 2 Dec 2013, at 15:20, Johansson, Daniel <Daniel.Johansson2@sonymobile.com> wrote:
Hi Freeradius-users
We have configured copy-acct-to-home-serverA and copy-acct-to-home-serverB in our radius Configured two realms, two home_servers and have two detail files.
This works fine it copies the accounting hitting FR to the two home_servers.
However we have 20NAS servers sending accounting to the FR and we only want to copy-acct from two of the NAS servers
How can we configure FR to only copy acct to home servers when it comes from NAS1 and NAS2? We can identify the NASes by Called-Station-Id == nas1
We have tried using check-items like below, but it doesn't work as we expected, nothing is sent to the home server.
server copy-acct-to-home-serverA { listen { type = detail update control { Called-Station-Id == nas1, Proxy-To-Realm := realmA }
I guess we are doing something wrong with check items and attributes?
preacct { if (Calling-Station-ID == 'nas1') { update control { Proxy-To-Realm := realmA } } } Real unlang code works better than invented... Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Arran Cudbard-Bell -
Johansson, Daniel