Return to eap-radius.conf CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins

Annotation of embedaddon/strongswan/conf/plugins/eap-radius.conf, revision 1.1.1.1

1.1       misho       1: eap-radius {
                      2: 
                      3:     # Send RADIUS accounting information to RADIUS servers.
                      4:     # accounting = no
                      5: 
                      6:     # Close the IKE_SA if there is a timeout during interim RADIUS accounting
                      7:     # updates.
                      8:     # accounting_close_on_timeout = yes
                      9: 
                     10:     # Interval in seconds for interim RADIUS accounting updates, if not
                     11:     # specified by the RADIUS server in the Access-Accept message.
                     12:     # accounting_interval = 0
                     13: 
                     14:     # If enabled, accounting is disabled unless an IKE_SA has at least one
                     15:     # virtual IP. Only for IKEv2, for IKEv1 a virtual IP is strictly necessary.
                     16:     # accounting_requires_vip = no
                     17: 
                     18:     # If enabled, adds the Class attributes received in Access-Accept message to
                     19:     # the RADIUS accounting messages.
                     20:     # accounting_send_class = no
                     21: 
                     22:     # Use class attributes in Access-Accept messages as group membership
                     23:     # information.
                     24:     # class_group = no
                     25: 
                     26:     # Closes all IKE_SAs if communication with the RADIUS server times out. If
                     27:     # it is not set only the current IKE_SA is closed.
                     28:     # close_all_on_timeout = no
                     29: 
                     30:     # Send EAP-Start instead of EAP-Identity to start RADIUS conversation.
                     31:     # eap_start = no
                     32: 
                     33:     # Use filter_id attribute as group membership information.
                     34:     # filter_id = no
                     35: 
                     36:     # Prefix to EAP-Identity, some AAA servers use a IMSI prefix to select the
                     37:     # EAP method.
                     38:     # id_prefix =
                     39: 
                     40:     # Whether to load the plugin. Can also be an integer to increase the
                     41:     # priority of this plugin.
                     42:     load = yes
                     43: 
                     44:     # NAS-Identifier to include in RADIUS messages.
                     45:     # nas_identifier = strongSwan
                     46: 
                     47:     # Port of RADIUS server (authentication).
                     48:     # port = 1812
                     49: 
                     50:     # Base to use for calculating exponential back off.
                     51:     # retransmit_base = 1.4
                     52: 
                     53:     # Timeout in seconds before sending first retransmit.
                     54:     # retransmit_timeout = 2.0
                     55: 
                     56:     # Number of times to retransmit a packet before giving up.
                     57:     # retransmit_tries = 4
                     58: 
                     59:     # Shared secret between RADIUS and NAS. If set, make sure to adjust the
                     60:     # permissions of the config file accordingly.
                     61:     # secret =
                     62: 
                     63:     # IP/Hostname of RADIUS server.
                     64:     # server =
                     65: 
                     66:     # Number of sockets (ports) to use, increase for high load.
                     67:     # sockets = 1
                     68: 
                     69:     # Whether to include the UDP port in the Called- and Calling-Station-Id
                     70:     # RADIUS attributes.
                     71:     # station_id_with_port = yes
                     72: 
                     73:     dae {
                     74: 
                     75:         # Enables support for the Dynamic Authorization Extension (RFC 5176).
                     76:         # enable = no
                     77: 
                     78:         # Address to listen for DAE messages from the RADIUS server.
                     79:         # listen = 0.0.0.0
                     80: 
                     81:         # Port to listen for DAE requests.
                     82:         # port = 3799
                     83: 
                     84:         # Shared secret used to verify/sign DAE messages. If set, make sure to
                     85:         # adjust the permissions of the config file accordingly.
                     86:         # secret =
                     87: 
                     88:     }
                     89: 
                     90:     forward {
                     91: 
                     92:         # RADIUS attributes to be forwarded from IKEv2 to RADIUS.
                     93:         # ike_to_radius =
                     94: 
                     95:         # Same as ike_to_radius but from RADIUS to IKEv2.
                     96:         # radius_to_ike =
                     97: 
                     98:     }
                     99: 
                    100:     # Section to specify multiple RADIUS servers.
                    101:     servers {
                    102: 
                    103:     }
                    104: 
                    105:     # Section to configure multiple XAuth authentication rounds via RADIUS.
                    106:     xauth {
                    107: 
                    108:     }
                    109: 
                    110: }
                    111: