Govroam

This is an old revision of the document!

---

# Some basic logging
LogLevel 3                                                                                
                                                                                          
LogDestination         x-syslog:///LOG_DAEMON                                             

# Prevents RADIUS servers from causing a loop by sending requests back again.
LoopPrevention         On                                                                 
            
# FTICKS is a standardised way of logging authentication attempts.                                                                                                       
FTicksSyslogFacility LOG_LOCAL0                                                           
FTicksReporting Full                                                                      
FTicksMAC VendorKeyHashed                                                                 
FTicksKey arandomsalt                                                                     


# Upstream RADIUS proxy                                                                                   
server  nrps1 {                                                                           
        host 10.10.10.31                                                                  
        type udp                                                                          
        secret XXXX                                                             
        statusServer on   #This checks that status of the adjacent servers.                                                                   
}                                                                                         


# Local IdP which will do the authentication                                                                                        
server  localidp1 {                                                                       
        host 10.10.10.21                                                                  
        type udp                                                                          
        secret XXXX                                                             
        statusServer on                                                                   
}                                                                                         


# RADIUS requests will also be received from the national proxies.                                                                                       
client  nrps1 {                                                                           
        host 10.10.10.31                                                                  
        type udp                                                                          
        secret XXXX                                                             
}                                                                                         
                                                                                          
client  localidp1 {                                                                       
        host 10.10.10.21                                                                  
        type udp                                                                          
        secret XXXX                                                             
}                                                                                         

# Wireless system                                                                                           
client  nas {                                                                             
        host 10.10.10.10                                                                  
        type udp                                                                          
        secret XXXX                                                             
        fticksVISCOUNTRY GB                                                               
        fticksVISINST 1localnet        # Adding information to the logs about this client.                                                   
}                                                                                         

#Known local realm                                                                                          
realm localnet {                                                                          
        server localidp1                                                                  
        AccountingResponse On                                                             
}                                                                                         

#Default destination for unknown realms                                                                                          
realm * {                                                                         
        server nrps1                                                                
        AccountingResponse On                                                             
}