# The goal of the templates is to have common configuration located
# in this file, and to list only the *differences* in the individual
# sections. This feature is most useful for sections like "clients"
-# or "home_servers", where many may be defined, and each one has
-# similar repeated configuration.
+# where many may be defined, and each one has similar repeated
+# configuration.
#
# Something similar to templates can be done by putting common
# configuration into separate files, and using "$INCLUDE file...",
# the configuration files.
#
- #
- # This is a default template for the "home_server" section.
- # Note that there is no name for the section.
- #
- # Any configuration item that is valid for a "home_server"
- # section is also valid here. When a "home_server" section
- # is defined in proxy.conf, this section is referenced as
- # the template.
- #
- # Configuration items that are explicitly listed in a
- # "home_server" section of proxy.conf are used in
- # preference to the configuration items listed here.
- #
- # However, if a configuration item is NOT listed in a
- # "home_server" section of proxy.conf, then the value here
- # is used.
- #
- # This functionality lets you put common configuration into
- # a template, and to put only the unique configuration
- # items in "proxy.conf". Each section in proxy.conf can
- # then contain a line "$template home_server", which will
- # cause it to reference this template.
- #
- home_server {
- response_window = 20
- zombie_period = 40
- revive_interval = 120
- #
- # Etc.
- }
-
- #
- # You can also have named templates. For example, if you
- # are proxying to 3 different home servers all at the same
- # site, with identical configurations (other than IP
- # addresses), you can use this named template.
- #
-
- # Then, each "home_server" section in "proxy.conf" would
- # only list the IP address of that home server, and a
- # line saying
- #
- # $template example_com
- #
- # That would tell FreeRADIUS to look in the section below
- # for the rest of the configuration items.
- #
- # For various reasons, you shouldn't have a "." in the template
- # name. Doing so means that the server will be unable to find
- # the template.
- #
- example_com {
- type = auth
- port = 1812
- secret = testing123
- response_window = 20
- #
- # Etc...
- }
-
#
# You can have templates for other sections, too, but they
# seem to be most useful for home_servers.
}
}
- # When a home server changes state.
- # These traps are edge triggered.
- home_server {
- # common arguments: IP, port, identifier
- args = "radiusAuthServerAddress a %{proxy-request:Packet-Dst-IP-Address} radiusAuthClientServerPortNumber i %{proxy-request:Packet-Dst-Port} radiusAuthServIdent s '%{home_server:instance}'"
-
- # The home server has been marked "alive"
- alive = "${snmptrap}::homeServerAlive ${args}"
-
- # The home server has been marked "zombie"
- zombie = "${snmptrap}::homeServerZombie ${args}"
-
- # The home server has been marked "dead"
- dead = "${snmptrap}::homeServerDead ${args}"
- }
-
- # When a pool of home servers changes state.
- home_server_pool {
- # common arguments
- args = "radiusdConfigName s %{home_server:instance}"
-
- # It has reverted to "normal" mode, where at least one
- # home server is alive.
- normal = "${snmptrap}::homeServerPoolNormal ${args}"
-
- # It is in "fallback" mode, with all home servers "dead"
- fallback = "${snmptrap}::homeServerPoolFallback ${args}"
- }
-
# Triggers for specific modules. These are NOT in the module
# configuration because they are global to all instances of the
# module. You can have module-specific triggers, by placing a