proxy to 2 servers

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Wed Apr 2 21:21:52 CEST 2008


Hi,

> Iserver_one and server_two have to process all requests.
> 
> Are following realms correct?
> 
> realm DEFAULT {
>        type            = radius
>        authhost        = 192.168.0.10:1812
>        accthost        = 192.168.0.10:1813
>        secret          = testing123
> }
> 
> realm DEFAULT {
>        type            = radius
>        authhost        = 192.168.0.11:1812
>        accthost        = 192.168.0.11:1813
>        secret          = testing123
> }

that would, on first inspection, tell your freeradius server to send
any default auth (DEFAULT) to either of those servers. depending
on which one it felt like using. probably NOT what you wanted.
as stated, if server 1 must send ALL to 192.168.0.10 and server 2
send ALL to 192.168.0.11 then really you'd

 realm DEFAULT1 {
        type            = radius
        authhost        = 192.168.0.10:1812
        accthost        = 192.168.0.10:1813
        secret          = testing123
 }

 realm DEFAULT2 {
        type            = radius
        authhost        = 192.168.0.11:1812
        accthost        = 192.168.0.11:1813
        secret          = testing123
 }

and use unlang to set the Proxy-To-Realm for each server

alan



More information about the Freeradius-Users mailing list