From 655924074b8555d7c0cd0fe39f90cf59f7f82cb0 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 23 Oct 2017 12:08:17 +0200 Subject: eap-radius: Optionally send Class attributes in RADIUS accounting messages If enabled, add the RADIUS Class attributes received in Access-Accept messages to RADIUS accounting messages as suggested by RFC 2865 section 5.25. Fixes #2451. --- conf/plugins/eap-radius.opt | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'conf') diff --git a/conf/plugins/eap-radius.opt b/conf/plugins/eap-radius.opt index c3668ec06..f18a74c49 100644 --- a/conf/plugins/eap-radius.opt +++ b/conf/plugins/eap-radius.opt @@ -13,6 +13,10 @@ charon.plugins.eap-radius.accounting_requires_vip = no If enabled, accounting is disabled unless an IKE_SA has at least one virtual IP. Only for IKEv2, for IKEv1 a virtual IP is strictly necessary. +charon.plugins.eap-radius.accounting_send_class = no + If enabled, adds the Class attributes received in Access-Accept message to + the RADIUS accounting messages. + charon.plugins.eap-radius.class_group = no Use class attributes in Access-Accept messages as group membership information. -- cgit v1.2.3