proxy auth and acct to different destination
Matthew Newton
mcn at freeradius.org
Mon Jul 25 08:38:27 UTC 2022
On 25/07/2022 02:47, Bill Yuan wrote:
> in the proxy.conf, we can config as below to handle realm "ABC"
> realm ABC{
> authhost = radius.example.com:1812
> accthost = radius.example.com:1813
> secret = testing123
> }
> which means proxy to different destinations, but with the same secret.
> what if we have different shared secrets for auth and acct server?
Use a pool, there are examples in proxy.conf
home_server home-auth1 {
type = auth
ipaddr = 1.2.3.4
secret = testing123
}
home_server home-acct1 {
type = acct
ipaddr = 5.6.7.8
secret = testing456
}
home_server_pool home-auth-pool {
home_server = home-auth1
}
home_server_pool home-acct-pool {
home_server = home-acct1
}
realm ABC {
auth_pool = home-auth-pool
acct_pool = home-acct-pool
}
--
Matthew
More information about the Freeradius-Users
mailing list