Freeradius 2.1 - Accouting packets mirring
A.L.M.Buxey at lboro.ac.uk
A.L.M.Buxey at lboro.ac.uk
Wed Feb 26 15:15:05 CET 2014
Hi,
> copy of this packets to the appliance. What's the easiest way to do
> this without messing up with my current configuration?
you just need to edit your current configuration...not mess it up. so something
along the lines of
symlink or copy copy-acct-to-home-server into the sites-enabled directory
so that it will be used/active
but wait! that file needs this 'detail' file, right? well, edit the modules/detail
file (if not using it already) and make sure it writes 'detailfile' to the correct
place (ie that line matches what the read line in the copy-acct-to-home-server says!
then in the accounting section of your main server (here I guess its just 'default'
you ensure you have a call to 'detail' in your accounting {} section eg
if (Acct-Session-Time != 0) {
detail
}
else {
ok
}
(this example has a protection wrapper to ensure certain NAS junk doesnt mess up things!)
now...at this point this new VS is going to be quite dumb - it will read in packets from the detail
file and then act on them just as you've told it to - ie it will take the packets in and follow
rules already set in proxy.conf for how to handle the packets.... so, what you have to do is, in
the copy-acct-to-home-server VS, edit the preacct part to have eg
preacct {
update control {
Proxy-To-Realm := "new_appliance"
}
}
and then in proxy.conf have eg
realm new_appliance {
type = radius
accthost = x.x.x.x:1813
secret = SECRET
}
obviously replacing x.x.x.x and SECRET as required!!!!! ;-)
done.
alan
More information about the Freeradius-Users
mailing list