Introduction
Evolynx RADIUS server can be used as a RADIUS proxy (forwarder) server. You can
define different circumstances in which the Server will forward the request to another
server. This is done by entering the forwarding information in a file named "proxy.txt".
This file is located in the Program installation directory.
Note: The Proxy mode must be enabled in the Config file.
Configuration Options
Proxy.txt is a simple text file. Lines starting with "#" character are ignored.
Each line of this file contains one "Forwarding Condition", as follows:
Attrib-Name Attrib-Value Auth-Server
Auth-Port Acct-Server Acct-Port
Flag
Attrib-Name
Attrib-Name is the name of attribute which its value is being used as a "Forwarding
Condition". This name must be defined in Dictionary file.
Attrib-Value
Attrib-Value is an integer, string or IP address value which is compared to the
contents of the attribute and if any part of the attribute matches with this value,
the packet will be forwarded to another server. The comparison is not case sensitive.
Auth-Server
This parameter specifies the IP address of the remote server which Authentication
packets will be forwarded to.
Auth-Port
This parameter specifies the UDP Port number of the remote server which Authentication
packets will be forwarded to.
Acct-Server
This parameter specifies the IP address of the remote server which Accounting packets
will be forwarded to.
Acct-Port
This parameter specifies the UDP Port number of the remote server which Accounting
packets will be forwarded to.
Flag
Flag determines which part of the Attribute should be looked for the Attrib-Value.
Valid values are:
- 0 (or omitted) = any part
- 1 = Left
- 2 = right
If the proxy mode is enabled in the Config file, when Evolynx Server receives a
RADIUS packet from a client, it will check the packet attributes with each "Forwarding
Condition" one-by-one in the order they appear in "proxy.txt" file. If there is
a match, the packet will be forwarded to the appropriate server. If there is no
matched rule, that packet will be processed by the current server. This means your
server can work as a RADIUS server for some packets and as a Proxy server for other
packets.
If you want to redirect all packets that do not have a matching rule, use * for
both Attrib-Name and Attrib-Value parameters in the last line of your proxy file.
|