clients.radius

radius

A Client clause specifies a RADIUS client that the server will listen to. The client clause must be defined with a string that represents its name. Requests received from any client not named in a Client clause in the configuration file will be silently ignored. The DEFAULT client (if defined) will handle requests from clients that are not defined elsewhere.

You must have a Client clause for every RADIUS client which your server is expected to serve, or else a DEFAULT Client.

Example configuration of a radius clients list clause:

radius "CLIENTS_RADIUS_ALL" {
    client "localhost" {
        source {
            ip 127.0.0.1;
        }
        secret "mysecret";
        limit_proxy_state true;
    }
}

Set limit_proxy_state true to reject RADIUS/1.0 requests that contain Proxy-State without Message-Authenticator. The setting applies only to Access-Request. Set require_message_authenticator true when every RADIUS/1.0 request must contain Message-Authenticator.