| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111 | eap-radius {    # Send RADIUS accounting information to RADIUS servers.    # accounting = no    # Close the IKE_SA if there is a timeout during interim RADIUS accounting    # updates.    # accounting_close_on_timeout = yes    # Interval in seconds for interim RADIUS accounting updates, if not    # specified by the RADIUS server in the Access-Accept message.    # accounting_interval = 0    # If enabled, accounting is disabled unless an IKE_SA has at least one    # virtual IP. Only for IKEv2, for IKEv1 a virtual IP is strictly necessary.    # accounting_requires_vip = no    # If enabled, adds the Class attributes received in Access-Accept message to    # the RADIUS accounting messages.    # accounting_send_class = no    # Use class attributes in Access-Accept messages as group membership    # information.    # class_group = no    # Closes all IKE_SAs if communication with the RADIUS server times out. If    # it is not set only the current IKE_SA is closed.    # close_all_on_timeout = no    # Send EAP-Start instead of EAP-Identity to start RADIUS conversation.    # eap_start = no    # Use filter_id attribute as group membership information.    # filter_id = no    # Prefix to EAP-Identity, some AAA servers use a IMSI prefix to select the    # EAP method.    # id_prefix =    # Whether to load the plugin. Can also be an integer to increase the    # priority of this plugin.    load = yes    # NAS-Identifier to include in RADIUS messages.    # nas_identifier = strongSwan    # Port of RADIUS server (authentication).    # port = 1812    # Base to use for calculating exponential back off.    # retransmit_base = 1.4    # Timeout in seconds before sending first retransmit.    # retransmit_timeout = 2.0    # Number of times to retransmit a packet before giving up.    # retransmit_tries = 4    # Shared secret between RADIUS and NAS. If set, make sure to adjust the    # permissions of the config file accordingly.    # secret =    # IP/Hostname of RADIUS server.    # server =    # Number of sockets (ports) to use, increase for high load.    # sockets = 1    # Whether to include the UDP port in the Called- and Calling-Station-Id    # RADIUS attributes.    # station_id_with_port = yes    dae {        # Enables support for the Dynamic Authorization Extension (RFC 5176).        # enable = no        # Address to listen for DAE messages from the RADIUS server.        # listen = 0.0.0.0        # Port to listen for DAE requests.        # port = 3799        # Shared secret used to verify/sign DAE messages. If set, make sure to        # adjust the permissions of the config file accordingly.        # secret =    }    forward {        # RADIUS attributes to be forwarded from IKEv2 to RADIUS.        # ike_to_radius =        # Same as ike_to_radius but from RADIUS to IKEv2.        # radius_to_ike =    }    # Section to specify multiple RADIUS servers.    servers {    }    # Section to configure multiple XAuth authentication rounds via RADIUS.    xauth {    }}
 |