proxy auth and acct to different destination

Matthew Newton mcn at freeradius.org
Mon Jul 25 08:38:27 UTC 2022



On 25/07/2022 02:47, Bill Yuan wrote:
> in the proxy.conf, we can config as below to handle realm "ABC"
> realm ABC{
>   authhost = radius.example.com:1812
>   accthost = radius.example.com:1813
>   secret = testing123
> }
> which means proxy to different destinations, but with the same secret.
> what if we have different shared secrets for auth and acct server?

Use a pool, there are examples in proxy.conf


home_server home-auth1 {
   type = auth
   ipaddr = 1.2.3.4
   secret = testing123
}

home_server home-acct1 {
   type = acct
   ipaddr = 5.6.7.8
   secret = testing456
}

home_server_pool home-auth-pool {
   home_server = home-auth1
}

home_server_pool home-acct-pool {
   home_server = home-acct1
}

realm ABC {
   auth_pool = home-auth-pool
   acct_pool = home-acct-pool
}


-- 
Matthew


More information about the Freeradius-Users mailing list