Send Accounting from any point in configuration

Alan DeKok aland at deployingradius.com
Tue Jun 15 08:54:34 CEST 2010


Stefan A. wrote:
> I mean *create* an Accounting Packet, if an Access Request comes in.

  Use "radclient".

> This is will be used to provision a HTTP Proxy Platform about the upcoming
> isage of an IP address.

  Oh... that.  The HTTP proxy is completely and totally broken.  Using
accounting packet to provision data is wrong.

  I'll go update the RADIUS specs to say that.

> I will have to check any Accounting Packet for some Attributes/Values.
> If a packet matches, it has to be proxied to a destination RADIUS Server.
> 
> For instance:
> 	if
>         NAS-IP-Address = 10.10.19.173
>         Called-Station-Id = "apn1.isp.de"
>         Acct-Status-Type =* ""
> 	Then proxy to 10.200.1.1
> 
> 	if
>         NAS-IP-Address = 10.10.18.120
>         Called-Station-Id = "apn1.isp.de"
>         Acct-Status-Type =* ""
> 	Then proxy to 10.200.100.100
> 
> 	else 
> 		do not proxy
> 
> In that case, I have to check the attributes to decide, to which RADISU
> Server I have to send the packets.

  See "man unlang".  You can write rules that look pretty much like what
you have above.

> I found the section in the proxy.conf:
> 
> #  rlm_realm").  To manually proxy the request put this entry in the
> #  "users" file:
> #
> #
> #DEFAULT	Proxy-To-Realm := "realm_name"
> #
> 
> 
> Does it mean, that the lines un users file will do the work?

  Well... yes.  That's the intent of the documentation.

> DEFAULT	        NAS-IP-Address = 10.10.19.173, Called-Station-Id =
> "apn1.isp.de", Acct-Status-Type =* "", Proxy-To-Realm := "destination1"
> DEFAULT	        NAS-IP-Address = 10.10.18.120, Called-Station-Id =
> "apn1.isp.de", Acct-Status-Type =* "", Proxy-To-Realm := "destination2"

  Except see "man users".  You need to use the *correct* comparison
operators.  And doing this is pointless: Acct-Status-Type =* "".  Just
delete that check.

> Is manual proxying in unlang possible, using sites-available/default ?

  Yes.  Anything you can do in the "users" file you can do in "unlang".

  Alan DeKok.



More information about the Freeradius-Users mailing list