Hi,

> home_server_pool EDUROAM-FTLR {
>         type                    = fail-over
>         home_server             = proxy1
>         home_server             = proxy2
> }

I would use:  

type = client-port-balance


to balance between the 2. (that method ensures the EAP goes to one remote 
server)

> realm DEFAULT {
>         pool = EDUROAM-FTLR
>         nostrip
> }

hmmmm, this isnt best practice if thats all you have for throwing stuff 
upstream. woulf
strongly recommend using unlang to validate that the user has valid realm etc 
and then
update the request to use a realm identifier (eg eduroam) and use that in 
proxy.conf instead -
thus you are only sending valid users upstream (and not all the random typos 
and junk)
as the upstream servers will like you more for that - and wont be dropping 
requests and messing
you up.

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to