Directed Realm Configuration Files
This section discusses how to set up the directed realm configuration files.
Sample radius.ini Realm Settings
The same radius.ini excerpt works for our sample directed realm as for our sample proxy realm. The ExtendedProxy setting needs to be enabled (set to 1). The AttributeEdit setting does not apply to directed realms.
[Configuration]
ExtendedProxy=1
 |
NOTE: For syntax details, see [Configuration] Section. |
Sample proxy.ini File
The following proxy.ini file registers the proxy realm called sample.com and registers a directed authentication and accounting realm called sample2.com. It defines several directed accounting methods, including those we plan to reference from the sample2.com.pro realm configuration file.
[Realms]
sample.com
[Directed]
sample2.com
[DirectedAcctMethods]
CustBAcctSQL = c:\radius\CustomerB\theirsql.acc
CustCAcctAttributes = c:\radius\CustomerC\account.ini
CustCAcctSQLConfig = c:\radius\CustomerC\sqlacct.acc
CustDAcctSQLConfig3 = c:\radius\CustomerD\mysql.acc
|
NOTE: For syntax details, see proxy.ini File. |
The following proxy.ini file specifies that otto@rtt.other.com and carol@3g.other.com would both map to the other.com directed realm.
[Directed]
other.com = *.other.com
The following proxy.ini file specifies that otto@rtt.other.com and carol@3g.other.com would map to the other.com directed realm and that caitlin@groton.other.com would map to the groton.other.com directed realm.
[Directed]
other.com = *.other.com
groton.other.com
Sample Directed Realm (.dir) File
The following configuration file must be called sample2.com.dir for it to work with the sample radius.ini file (described on 155) and proxy.ini file (described on 155).
[Auth]
Enable = 1
StripRealm = 1
UseMasterDictionary = yes
[Acct]
Enable = 1
RecordLocally = 1
UseMasterDictionary = yes
[AuthMethods]
Native User
[AcctMethods]
CustCAcctAttributes
CustCAcctSQLConfig
[Called-Station-Id]
8885551212
55512340
|
NOTE: For syntax details, see Directed Realm Configuration (.dir) File. |
This sample file configures both directed authentication and directed accounting. It also strips realm routing information from the User-Name prior to authentication.
The [Acct Methods] section of this file lists the two accounting methods for the sample2.com realm. These are CustCAcctAttributes, which specifies how to log attributes to a .act accounting log file on the local server, and CustCAcctSQLConfig, which configures accounting to an external SQL database. Both methods are configured in the [DirectedAcctMethods] section of our sample proxy.ini file, above.
