# Some basic logging
LogLevel 3
LogDestination x-syslog:///LOG_DAEMON
# Prevents RADIUS servers from causing a loop by sending requests back again.
LoopPrevention On
# FTICKS is a standardised way of logging authentication attempts.
FTicksSyslogFacility LOG_LOCAL0
FTicksReporting Full
FTicksMAC VendorKeyHashed
FTicksKey arandomsalt
# Upstream RADIUS proxy
server nrps1 {
host 10.10.10.31
type udp
secret XXXX
statusServer on #This checks that status of the adjacent servers.
}
# Local IdP which will do the authentication (Omit for Visited Only)
server localidp1 {
host 10.10.10.21
type udp
secret XXXX
statusServer on
}
# RADIUS requests will also be received from the national proxies.
client nrps1 {
host 10.10.10.31
type udp
secret XXXX
}
client localidp1 {
host 10.10.10.21
type udp
secret XXXX
}
# Wireless system
client nas {
host 10.10.10.10
type udp
secret XXXX
fticksVISCOUNTRY GB
fticksVISINST 1localnet # Adding information to the logs about this client.
}
#Known local realm (Omit for Visited Only)
realm localnet {
server localidp1
AccountingResponse On
}
#Default destination for unknown realms
realm * {
server nrps1
AccountingResponse On
}