Mercurial > hg > freeDiameter
comparison doc/app_radgw.conf.sample @ 516:1c2f5ee38039
Allow RADIUS Proxies with the app_radgw extension
author | Sebastien Decugis <sdecugis@nict.go.jp> |
---|---|
date | Fri, 27 Aug 2010 10:59:51 +0900 |
parents | 411314907b43 |
children | 6fe3e5cf9fb2 |
comparison
equal
deleted
inserted
replaced
515:b9167b4de7dc | 516:1c2f5ee38039 |
---|---|
46 | 46 |
47 ################## | 47 ################## |
48 # RADIUS Clients # | 48 # RADIUS Clients # |
49 ################## | 49 ################## |
50 | 50 |
51 # Each RADIUS client must be declared in the form: cli = IP / shared-secret ; | 51 # Each RADIUS client must be declared in the form: |
52 # nas = IP / shared-secret ; | |
52 # IP can be ipv4 or ipv6 | 53 # IP can be ipv4 or ipv6 |
53 # port can be additionaly restricted with brackets: IP[port] (ex: 192.168.0.1[1812]) | 54 # port can be additionaly restricted with brackets: IP[port] (ex: 192.168.0.1[1812]) |
54 # shared-secret can be a quoted string, or a list of hexadecimal values. | 55 # shared-secret can be a quoted string, or a list of hexadecimal values. |
55 # examples: | 56 # examples: |
56 # cli = 192.168.100.1 / "secret key" ; # the shared secret buffer is 0x736563726574206b6579 (length 10 bytes) | 57 # nas = 192.168.100.1 / "secret key" ; # the shared secret buffer is 0x736563726574206b6579 (length 10 bytes) |
57 # cli = fe00::1 / 73 65 63 72 65 74 20 6b 65 79; # same shared secret as previously | 58 # nas = fe00::1 / 73 65 63 72 65 74 20 6b 65 79; # same shared secret as previously |
58 # When a packet is received from an IP not declared here, it is discarded. | 59 # When a packet is received from an IP not declared here, it is discarded. |
60 | |
61 # If the RADIUS client is a Proxy that forwards messages from different peers, it must be | |
62 # declared instead as follow: | |
63 # pxy = IP / shared-secret ; | |
64 # Note that it is not recommended to use this gateway implementation with a proxy currently, | |
65 # since the management of duplicate messages might be insufficient. | |
66 | |
67 # The old notation cli = ... is equivalent to nas = ... and kept for backward compatibility. | |
59 | 68 |
60 | 69 |
61 #################### | 70 #################### |
62 # Authentication # | 71 # Authentication # |
63 # Authorization # | 72 # Authorization # |