Re: Freeradius-Users Digest, Vol 49, Issue 95

2009-05-21 Thread Alan DeKok 
Marco De Magistris wrote:
 In my opinion the packet (received from Radius Client) is sent towards
 the default gateway.

  Yes.  That's how neteworking works.

 The following link describes the same scenario:
 
 http://www.opensubscriber.com/message/freeradius-users@lists.freeradius.org/82575.html

 They introduce *proxyip = 10.10.10.10* in proxy.conf.

  In 2.x, you can define the addresses that the server opens for
proxying.  See the listen section of radiusd.conf.  That may help.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Freeradius-Users Digest, Vol 49, Issue 95

2009-05-21 Thread Ivan Kalik 
 3. RE: Freeradius-Users Digest, Vol 49, Issue 93 (Ivan Kalik)

 

 Radius Client--  Radius Proxy

 192.168.1.2  192.168.1.3  192.168.14.3  -- IPS1(192.168.14.4)

   192.168.24.3  -- IPS2(192.168.24.4)

 

 You say:

Yes. Proxy server will change NAS-IP-Address from the original NAS
 address into it's own. That is OK.



 It not works. In my scenario I have two different NAS-IP-Address(a
 NAS-IP-Address for ISP1 and a NAS-IP-Address for ISP2).


That's because that can't work:

  # Note: type = proxy lets you control the source IP used for
  # proxying packets, with some limitations:
  #
  # * Only ONE proxy listener can be defined.
  # * A proxy listener CANNOT be used in a virtual server section.
  # * You should probably set port = 0.
  # * Any clients configuration will be ignored.

You can't define two IPs on which to proxy. You need two proxy servers for
that:

proxy1 gets requests from NAS - if it's for isp1 proxy to 192.168.14.4
from 192.168.14.3

if it's for isp2, proxy to proxy2 (also from 192.168.14.3)

proxy2 will have 192.168.24.3 configured as proxy port and proxy to
192.168.24.4 (isp2)

You can even have proxy1 and proxy2 on the same machine, one listening on
1812+ ports and other on 1645+ ports. They just can't be the same radiusd
process.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html