RadSec Proxy Stig Venaas

RadSec Proxy Generic proxy, any number of UDP and/or TLS clients and/or servers Can run on same host as a standard RADIUS server to enable RadSec Could possibly also be e.g. a national proxy server if it at some point is determined to be stable enough First prototype available, several features missing No certificate validation Does not forward accounting messages, no status-server Does not do retransmissions on its own but re-forwards retransmitted queries it receives Some attributes (password/key attributes) need to be re-encrypted by proxy, need to check whether any are missing Plan to support dynamic discovery of RadSec peers if desired These features will be added shortly, but would prefer getting a few people to test basic functionality now Also need to test together with other RadSec implementations

Testing Could need some alpha testers before making a public release… Please contact me if you are willing to participate in some early testing the coming weeks Have done several tests on my own, e.g.: Laptop with eduroam WPA with EAP-TLS UNINETT AP uninett.no RADIUS.no RADIUS RadSec Proxy venaas.no RADIUS UDP TLS/IPv6