Freeradius 2.1 - Accouting packets mirring

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Wed Feb 26 15:15:05 CET 2014


Hi,

> copy of this packets to the appliance. What's the easiest way to do
> this without messing up with my current configuration?

you just need to edit your current configuration...not mess it up. so something
along the lines of

symlink or copy copy-acct-to-home-server  into the sites-enabled directory
so that it will be used/active

but wait! that file needs this 'detail' file, right? well, edit the modules/detail
file (if not using it already) and make sure it writes 'detailfile' to the correct
place (ie that line matches what the read line in the copy-acct-to-home-server says!

then in the accounting section of your main server (here I guess its just 'default'
you ensure you have a call to 'detail' in your accounting {} section eg

        if (Acct-Session-Time != 0) {
	        detail
        }
        else {
                ok
        }


(this example has a protection wrapper to ensure certain NAS junk doesnt mess up things!)

now...at this point this new VS is going to be quite dumb - it will read in packets from the detail
file and then act on them just as you've told it to - ie it will take the packets in and follow
rules already set in proxy.conf for how to handle the packets.... so, what you have to do is, in 
the copy-acct-to-home-server VS, edit the preacct part to have eg 

preacct { 
                update control { 
                        Proxy-To-Realm := "new_appliance" 
                } 
} 

and then in proxy.conf have eg

realm new_appliance { 
        type            = radius 
        accthost        = x.x.x.x:1813 
        secret          = SECRET 
} 

obviously replacing x.x.x.x and SECRET as required!!!!!  ;-)


done.

alan


More information about the Freeradius-Users mailing list