Proxy and Forwarding

Evolynx RADIUS server can be used as a RADIUS proxy (forwarder) server. You can define different circumstances in which the Server will forward the request to another server. This is done by entering the forwarding information in a file named “proxy.txt”. This file is located in the Program installation directory.

Note: The Proxy mode must be enabled in the Config file. Configuration Options

Proxy.txt is a simple text file. Lines starting with “#” character are ignored. Each line of this file contains one “Forwarding Condition”, as follows: 

Attrib-Name   Attrib-Value   Auth-Server    Auth-Port   Acct-Server   Acct-Port    Flag
Attrib-Name

Attrib-Name is the name of attribute which its value is being used as a “Forwarding Condition”. This name must be defined in Dictionary file. A special value of “Client-IP-Address” can also be used for scenarios when NAS-IP-Address does not match the IP address of the client (device communicating with RADIUS server).

Attrib-Value

Attrib-Value is an integer, string or IP address value which is compared to the contents of the attribute and if any part of the attribute matches with this value, the packet will be forwarded to another server. The comparison is not case sensitive.

Auth-Server

This parameter specifies the IP address of the remote server which Authentication packets will be forwarded to.

Auth-Port

This parameter specifies the UDP Port number of the remote server which Authentication packets will be forwarded to.

Acct-Server

This parameter specifies the IP address of the remote server which Accounting packets will be forwarded to.

Acct-Port

This parameter specifies the UDP Port number of the remote server which Accounting packets will be forwarded to.

Flag

Flag determines which part of the Attribute should be looked for the Attrib-Value. Valid values are:

0 (or omitted) = any part
1 = Left
2 = right

If the proxy mode is enabled in the Config file, when Evolynx Server receives a RADIUS packet from a client, it will check the packet attributes with each “Forwarding Condition” one-by-one in the order they appear in “proxy.txt” file. If there is a match, the packet will be forwarded to the appropriate server. If there is no matched rule, that packet will be processed by the current server. This means your server can work as a RADIUS server for some packets and as a Proxy server for other packets.

If you want to redirect all packets that do not have a matching rule, use * for both Attrib-Name and Attrib-Value parameters in the last line of your proxy file.