Thank you Alan,
> > The intended Flow:
> >
> > Packet comes in ...
> > - for Access type, check if user might be authenticated
> > - if OK, try to decide to send an Accounting packet to a Server on
> some
> > attributes (in my case, VSA from downstream RADIUS Proxy Server)
>
> Do you mean *create* an accounting packet, or forward *later*
> accounting packets for that session?
I mean *create* an Accounting Packet, if an Access Request comes in.
This is will be used to provision a HTTP Proxy Platform about the upcoming
isage of an IP address.
Normally, it can be done using the AcctPacket, coming from the NAS, but in
our current case, the HTTP Proxy Platform has problems to provision the
information inside and we figured, that the payload might hit the HTTP Proxy
before the MSISDN has been provisioned to the Proxy Process.
Tweaking this Access Request to Acct Start Packet will give some more ms.
> > As far as I understood, the proxy module does
> > - (only) proxy based on realm
> > - in proxy module, normal local Logfiles won't be used
>
> That's not true. You can proxy based on anything you want. See
> raddb/proxy.conf for documentation.
Sorry, that I'm missing something.
I will have to check any Accounting Packet for some Attributes/Values.
If a packet matches, it has to be proxied to a destination RADIUS Server.
For instance:
if
NAS-IP-Address = 10.10.19.173
Called-Station-Id = "apn1.isp.de"
Acct-Status-Type =* ""
Then proxy to 10.200.1.1
if
NAS-IP-Address = 10.10.18.120
Called-Station-Id = "apn1.isp.de"
Acct-Status-Type =* ""
Then proxy to 10.200.100.100
else
do not proxy
In that case, I have to check the attributes to decide, to which RADISU
Server I have to send the packets.
I found the section in the proxy.conf:
# rlm_realm"). To manually proxy the request put this entry in the
# "users" file:
#
#
#DEFAULT Proxy-To-Realm := "realm_name"
#
Does it mean, that the lines un users file will do the work?
DEFAULT NAS-IP-Address = 10.10.19.173, Called-Station-Id =
"apn1.isp.de", Acct-Status-Type =* "", Proxy-To-Realm := "destination1"
DEFAULT NAS-IP-Address = 10.10.18.120, Called-Station-Id =
"apn1.isp.de", Acct-Status-Type =* "", Proxy-To-Realm := "destination2"
Is manual proxying in unlang possible, using sites-available/default ?
>
> You can proxy *and* log to detail files.
>
> Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
