peap termination issue when using fault tolerance

Mazor, Gil Gil.Mazor at safenet-inc.com
Sun Mar 27 12:50:33 CEST 2011


I setup FreeRadius as proxy as I want to extract MSCHAPv2 auth from EAP-PEAP/MSCHAPv2 ,and proxy only MSCHAPv2 request to another two radius servers for fault tolerance.

I can successfully do it with each one of the IAS servers below individually, however if one of the serves goes down and request is forward to the second servers on the list I get an error :

Error receiving packet: Connection reset by peer

Any suggestions how to enable Fault tolerance when using two realms ??

clients.conf

client 172.100.100.24/30 { secret = secretpass
                            shortname = NETMOTION }

proxy.conf

 realm mydomain.com {
                authhost              = 192.168.1.10:1812
                accthost               = 192.168.1.10:1813
                secret                   = 1111
                nostrip
}

 realm mydomain.com {
                authhost              = 192.168.1.117:1812
                accthost               = 192.168.1.117:1813
                secret                   = 1111
                nostrip

users.conf

DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, Proxy-To-Realm := mydomain.com


Eap.conf
default_eap_type = mschapv2
                  proxy_tunneled_request_as_eap = no
                  use_tunneled_reply = no
                  copy_request_to_tunnel = yes





The information contained in this electronic mail transmission 
may be privileged and confidential, and therefore, protected 
from disclosure. If you have received this communication in 
error, please notify us immediately by replying to this 
message and deleting it from your computer without copying 
or disclosing it.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110327/b8642383/attachment.html>


More information about the Freeradius-Users mailing list