-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathradiusd.conf
144 lines (120 loc) · 2.63 KB
/
radiusd.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
name = freeradius
correct_escapes = true
max_request_time = 30
max_requests = 10240
hostname_lookups = no
correct_escapes = true
debug_level = 0
prefix = .
localstatedir = ${prefix}/var
raddbdir = .
name = radiusd
log {
destination = stderr
auth = yes
timestamp = yes
}
security {
user = freerad
group = freerad
allow_core_dumps = no
max_attributes = 200
reject_delay = 1
status_server = yes
}
proxy_requests = yes
proxy server {
}
home_server g1 {
type = auth+acct
ipaddr = 216.239.34.91
port = 2083
proto = tcp
secret = radsec
response_window = 15
revive_interval = 10
status_check = none
check_interval = 30
check_timeout = 5
max_outstanding = 10000
tls {
private_key_file = /etc/freeradius/3.0/key.pem
certificate_file = /etc/freeradius/3.0/cert.pem
ca_path = /etc/freeradius/3.0/cacerts
random_file = /dev/urandom
fragment_size = 8192
tls_min_version = "1.2"
}
limit {
max_connections = 32
}
}
home_server g2 {
type = auth+acct
ipaddr = 216.239.32.91
port = 2083
proto = tcp
secret = radsec
response_window = 15
revive_interval = 10
status_check = none
check_interval = 30
check_timeout = 5
max_outstanding = 10000
tls {
private_key_file = /etc/freeradius/3.0/key.pem
certificate_file = /etc/freeradius/3.0/cert.pem
ca_path = /etc/freeradius/3.0/cacerts
random_file = /dev/urandom
fragment_size = 8192
tls_min_version = "1.2"
}
limit {
max_connections = 32
}
}
home_server_pool goog {
type = load-balance
home_server = g1
home_server = g2
}
realm orion.area120.com {
auth_pool = goog
acct_pool = goog
}
thread pool {
start_servers = 80
max_servers = 512
min_spare_servers = 48
max_spare_servers = 96
max_requests_per_server = 0
}
client controller {
ipaddr = *
secret = radsec
nastype = other
}
modules {
}
server default {
listen {
type = auth
ipaddr = *
port = 1812
}
listen {
type = acct
ipaddr = *
port = 1813
}
authorize {
update control {
Proxy-to-Realm := "orion.area120.com"
}
}
accounting {
update control {
Proxy-to-Realm := "orion.area120.com"
}
}
}