Pls help: realm based proxy setting

Ivan Kalik tnt at kalik.net
Sun Jul 5 20:04:30 CEST 2009


> Hi all,
>
> I'm using freeradius 2.1.3 and setting up a realm-based proxy server.
> In users file, I add line like following:
>
>
> DEFAULT         Aruba-Essid-Name == "NewSSID", Realm ==
> "realm1.my.domain", Proxy-to-realm := "test1.my.domain", aruba-user-vlan
> := 191
>                 Fall-Through = 1
>
> Request can be proxied to test1.my.domain if the realm
> "realm1.my.domain" is defined in proxy.conf.  Otherwise suffix will
> resolve to DEFAULT realm and thus won't match the line in users file.
> Is it possible to do the same thing without defining the 'virutal' realm
> (realm1.my.domain in my example) in proxy.conf?

Perhaps. Is everybody for NewSSID suposed to go to that radius server for
authentication? If not, in order to tell users apart you need a realm.

>
> Besides, I'd like to add "aruba-user-vlan := 191" AV pair in the reply
> but can't see it in radclient output.   Did I miss anything?

So add it as a reply item. It's on the check line in your entry.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list