What I need to have happen is for radius to proxy to another radius server (one of our customers) based on the DNIS regardless of realm. Some of our customers (which are ISP's) have multiple realms going to the same radius server. They would like to have us proxy to them based on where the call is coming from (i.e. the number assignments we give them). I don't want to have to add those realms to our radius server, just the DNIS numbers. If the DNIS is not found then I need for the radius server to use the realm to proxy.
I have gotten proxy to work fine using the realm (In the proxy.conf file) but am unable to get proxy by DNIS to work. I am using freeradius-0.8.1 on Redhat 8.0. The RAS is a Cisco 5800 with a 7206 for the "brain". I know it is sending the Called-Station-Id in the request:
rad_recv: Accounting-Request packet from host 209.163.108.19:1646, id=211, length=244
Acct-Session-Id = "0000018C"
Framed-Protocol = PPP
Framed-IP-Address = xxx.xxx.xxx.xxx
X-Ascend-Connect-Progress = 60
X-Ascend-PreSession-Time = 5
X-Ascend-Xmit-Rate = 45333
X-Ascend-Data-Rate = 12000
Acct-Session-Time = 33
Connect-Info = "45333/12000 V90/V42bis/LAPM"
Acct-Input-Octets = 43872
Acct-Output-Octets = 140
X-Ascend-Pre-Input-Octets = 115
X-Ascend-Pre-Output-Octets = 89
Acct-Input-Packets = 133
Acct-Output-Packets = 7
X-Ascend-Pre-Input-Packets = 4
X-Ascend-Pre-Output-Packets = 4
Acct-Terminate-Cause = User-Request
X-Ascend-Disconnect-Cause = 45
Acct-Authentic = RADIUS
User-Name = "[EMAIL PROTECTED]"
Acct-Status-Type = Stop
NAS-Port = 27
NAS-Port-Type = Async
Calling-Station-Id = "async"
Called-Station-Id = "8145550010"
Service-Type = Framed-User
NAS-IP-Address = xxx.xxx.xxx.xxx
Acct-Delay-Time = 0
I have done the default install using the ./configure options to put the files into the /etc/raddb directory. I have changed nothing except adding my test realms to the proxy.conf file, adding the necessary servers to the clients.conf file, and adding the following to the users file:
DEFAULT Called-Station-Id == "8145550010", Proxy-To-Realm := "realm.net" Fall-Through = No
There is a realm.net entry in the proxy.conf file but again, I don't want to add a realm there as I want it to proxy using the DNIS.
I know this is quite a big question but I would greatly appreciate any help all of you could find the time to give.
Thanks in advance
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
