accounting proxy via tcp

belyj at belyj.eu belyj at belyj.eu
Mon Apr 20 16:33:36 CEST 2020


Hi,

Im trying to proxy NAS requests to freeradius via tcp. Authentication 
works, but accounting packets are still arriving via udp to radius.

NAS < udp > FR proxy < tcp > FR, is it possible? or am i missing 
something

radiusd: FreeRADIUS Version 3.0.21 (git #af428abda), for host 
x86_64-pc-linux-gnu
FreeRADIUS Version 3.0.21

proxy.conf

home_server testsrv1 {
         type = auth+acct
         ipaddr = 192.168.1.10
         port = 2083
         proto = tcp
         secret = 01b6c42
}

home_server testsrv2 {
         type = acct
         ipaddr =  192.168.1.100
         port = 2084
         secret = 887b2a8a
         proto = tcp
}
...


sites-enabled/default

...
accounting {
                 update control {
                         Replicate-To-Realm += testsrv1
                         Replicate-To-Realm += testsrv2
                 }
                 replicate
...


12:53:35.758094 IP (tos 0x0, ttl 57, id 53740, offset 0, flags [none], 
proto UDP (17), length 204)
     192.168.1.1.62825 > 192.168.1.100.2084: [udp sum ok] UDP, length 176
12:53:36.760526 IP (tos 0x0, ttl 57, id 53771, offset 0, flags [none], 
proto UDP (17), length 178)
     192.168.1.1.17830 > 192.168.1.100.2084: [udp sum ok] UDP, length 150


More information about the Freeradius-Users mailing list