Pls help: realm based proxy setting

ST Wong (ITSC) ST at itsc.cuhk.edu.hk
Mon Jul 6 03:06:16 CEST 2009


>> Hi all,
>>
>> I'm using freeradius 2.1.3 and setting up a realm-based proxy server.
>> In users file, I add line like following:
>>
>>
>> DEFAULT         Aruba-Essid-Name == "NewSSID", Realm ==
>> "realm1.my.domain", Proxy-to-realm := "test1.my.domain", 
>> aruba-user-vlan := 191
>>                 Fall-Through = 1
>>
>> Request can be proxied to test1.my.domain if the realm 
>> "realm1.my.domain" is defined in proxy.conf.  Otherwise suffix will 
>> resolve to DEFAULT realm and thus won't match the line in users file.
>> Is it possible to do the same thing without defining the 'virutal' 
>> realm (realm1.my.domain in my example) in proxy.conf?
>
>Perhaps. Is everybody for NewSSID suposed to go to that radius server
for authentication? If not, in order to tell users apart you need a
realm.

Yes, we want to proxy users using different realms to different radius
servers for authentication.

>> Besides, I'd like to add "aruba-user-vlan := 191" AV pair in the
reply
>> but can't see it in radclient output.   Did I miss anything?
>
>So add it as a reply item. It's on the check line in your entry.

Get it.  

Thank you very much.
/ST Wong




More information about the Freeradius-Users mailing list