Stefan A. wrote: > I mean *create* an Accounting Packet, if an Access Request comes in.
Use "radclient". > This is will be used to provision a HTTP Proxy Platform about the upcoming > isage of an IP address. Oh... that. The HTTP proxy is completely and totally broken. Using accounting packet to provision data is wrong. I'll go update the RADIUS specs to say that. > I will have to check any Accounting Packet for some Attributes/Values. > If a packet matches, it has to be proxied to a destination RADIUS Server. > > For instance: > if > NAS-IP-Address = 10.10.19.173 > Called-Station-Id = "apn1.isp.de" > Acct-Status-Type =* "" > Then proxy to 10.200.1.1 > > if > NAS-IP-Address = 10.10.18.120 > Called-Station-Id = "apn1.isp.de" > Acct-Status-Type =* "" > Then proxy to 10.200.100.100 > > else > do not proxy > > In that case, I have to check the attributes to decide, to which RADISU > Server I have to send the packets. See "man unlang". You can write rules that look pretty much like what you have above. > I found the section in the proxy.conf: > > # rlm_realm"). To manually proxy the request put this entry in the > # "users" file: > # > # > #DEFAULT Proxy-To-Realm := "realm_name" > # > > > Does it mean, that the lines un users file will do the work? Well... yes. That's the intent of the documentation. > DEFAULT NAS-IP-Address = 10.10.19.173, Called-Station-Id = > "apn1.isp.de", Acct-Status-Type =* "", Proxy-To-Realm := "destination1" > DEFAULT NAS-IP-Address = 10.10.18.120, Called-Station-Id = > "apn1.isp.de", Acct-Status-Type =* "", Proxy-To-Realm := "destination2" Except see "man users". You need to use the *correct* comparison operators. And doing this is pointless: Acct-Status-Type =* "". Just delete that check. > Is manual proxying in unlang possible, using sites-available/default ? Yes. Anything you can do in the "users" file you can do in "unlang". Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
