@@ -310,6 +310,150 @@ client localhost2 {
310310# coa_server = coa
311311}
312312
313+ client localhost {
314+ # Allowed values are:
315+ # dotted quad (1.2.3.4)
316+ # hostname (radius.example.com)
317+ ipaddr = 0.0.0.0/0
318+ proto = tcp
319+ # OR, you can use an IPv6 address, but not both
320+ # at the same time.
321+ # ipv6addr = :: # any. ::1 == localhost
322+
323+ #
324+ # A note on DNS: We STRONGLY recommend using IP addresses
325+ # rather than host names. Using host names means that the
326+ # server will do DNS lookups when it starts, making it
327+ # dependent on DNS. i.e. If anything goes wrong with DNS,
328+ # the server won't start!
329+ #
330+ # The server also looks up the IP address from DNS once, and
331+ # only once, when it starts. If the DNS record is later
332+ # updated, the server WILL NOT see that update.
333+ #
334+
335+ # One client definition can be applied to an entire network.
336+ # e.g. 127/8 should be defined with "ipaddr = 127.0.0.0" and
337+ # "netmask = 8"
338+ #
339+ # If not specified, the default netmask is 32 (i.e. /32)
340+ #
341+ # We do NOT recommend using anything other than 32. There
342+ # are usually other, better ways to achieve the same goal.
343+ # Using netmasks of other than 32 can cause security issues.
344+ #
345+ # You can specify overlapping networks (127/8 and 127.0/16)
346+ # In that case, the smallest possible network will be used
347+ # as the "best match" for the client.
348+ #
349+ # Clients can also be defined dynamically at run time, based
350+ # on any criteria. e.g. SQL lookups, keying off of NAS-Identifier,
351+ # etc.
352+ # See raddb/sites-available/dynamic-clients for details.
353+ #
354+
355+ # netmask = 32
356+
357+ #
358+ # The shared secret use to "encrypt" and "sign" packets between
359+ # the NAS and FreeRADIUS. You MUST change this secret from the
360+ # default, otherwise it's not a secret any more!
361+ #
362+ # The secret can be any string, up to 8k characters in length.
363+ #
364+ # Control codes can be entered vi octal encoding,
365+ # e.g. "\101\102" == "AB"
366+ # Quotation marks can be entered by escaping them,
367+ # e.g. "foo\"bar"
368+ #
369+ # A note on security: The security of the RADIUS protocol
370+ # depends COMPLETELY on this secret! We recommend using a
371+ # shared secret that is composed of:
372+ #
373+ # upper case letters
374+ # lower case letters
375+ # numbers
376+ #
377+ # And is at LEAST 8 characters long, preferably 16 characters in
378+ # length. The secret MUST be random, and should not be words,
379+ # phrase, or anything else that is recognizable.
380+ #
381+ # The default secret below is only for testing, and should
382+ # not be used in any real environment.
383+ #
384+ secret = testing123
385+
386+ #
387+ # Old-style clients do not send a Message-Authenticator
388+ # in an Access-Request. RFC 5080 suggests that all clients
389+ # SHOULD include it in an Access-Request. The configuration
390+ # item below allows the server to require it. If a client
391+ # is required to include a Message-Authenticator and it does
392+ # not, then the packet will be silently discarded.
393+ #
394+ # allowed values: yes, no
395+ require_message_authenticator = no
396+
397+ #
398+ # The short name is used as an alias for the fully qualified
399+ # domain name, or the IP address.
400+ #
401+ # It is accepted for compatibility with 1.x, but it is no
402+ # longer necessary in 2.0
403+ #
404+ # shortname = localhost
405+
406+ #
407+ # the following three fields are optional, but may be used by
408+ # checkrad.pl for simultaneous use checks
409+ #
410+
411+ #
412+ # The nastype tells 'checkrad.pl' which NAS-specific method to
413+ # use to query the NAS for simultaneous use.
414+ #
415+ # Permitted NAS types are:
416+ #
417+ # cisco
418+ # computone
419+ # livingston
420+ # juniper
421+ # max40xx
422+ # multitech
423+ # netserver
424+ # pathras
425+ # patton
426+ # portslave
427+ # tc
428+ # usrhiper
429+ # other # for all other types
430+
431+ #
432+ nas_type = other # localhost isn't usually a NAS...
433+
434+ #
435+ # The following two configurations are for future use.
436+ # The 'naspasswd' file is currently used to store the NAS
437+ # login name and password, which is used by checkrad.pl
438+ # when querying the NAS for simultaneous use.
439+ #
440+ # login = !root
441+ # password = someadminpas
442+
443+ #
444+ # As of 2.0, clients can also be tied to a virtual server.
445+ # This is done by setting the "virtual_server" configuration
446+ # item, as in the example below.
447+ #
448+ # virtual_server = home1
449+
450+ #
451+ # A pointer to the "home_server_pool" OR a "home_server"
452+ # section that contains the CoA configuration for this
453+ # client. For an example of a coa home server or pool,
454+ # see raddb/sites-available/originate-coa
455+ # coa_server = coa
456+ }
313457# IPv6 Client
314458#client ::1 {
315459# secret = testing123
0 commit comments