servers.radius
radius
Beginning of a RADIUS server clause. The clause has a name which is defined as a string. Multiple RADIUS clauses can be configured inside the servers clause.
A RADIUS server must configure at least one of clients or @pre-client. See Client matching order for the lookup and fallback rules when both are configured.
Use failure-retry-interval to change
the default 30s delay before retrying failed server startup.
For UDP retransmission handling, see
duplicate_detection and
duplicate_cache.
Use status_server to configure
Status-Server responses.
Use
strict_reply_message to select
RFC 3579 filtering for Reply-Message in EAP responses.
Locally generated EAP Access-Accept replies do not copy User-Name from the
Access-Request. Set radius.reply.attr.User-Name in policy when the reply needs
it. Proxied Access-Accept replies can forward an upstream User-Name.
Access-Reject and Access-Challenge replies omit User-Name.
Use eap-message-validation to
control unchanged malformed terminal EAP forwarding. Both the backend server
and downstream server must permit forwarding; the default is enforce.