policy

This optional attribute directs all requests from this server to the named AAA policy, bypassing the normal policy selector conditions.

When policy is set, the server looks up the policy by exact name at startup. If no policy with that name is defined, Radiator logs a warning at startup. At request time, the packet is dropped and an error is logged.

When policy is not set, Radiator uses the policy selector: it iterates the defined policies in configuration file definition order and uses the first policy that has matching conditions and a matching handler.

The parameter type for the policy is string. For more information, see Policy documentation.

Example

The following example configures a RADIUS server that routes all requests to the policy named AUTH_POLICY.

servers {
    radius "AUTH_UDP" {
        listen {
            protocol udp;
            port 1812;
            ip 0.0.0.0;
        }

        clients "ALL_CLIENTS";

        # Named policy to use
        policy "AUTH_POLICY";
    }
}

aaa {
    # Name of the policy
    policy "AUTH_POLICY" {
        handler "AUTH_HANDLER" {
          # ...
        }
    }
}