This object contains configurations pertaining to the RadSecProxy service which implements the RadSec protocol for transporting RADIUS datagrams over TCP and TLS as detailed in {{bibref|RFC6614|Appendix B}}. Enables or disables the RadSecProxy service. Status of the RadSecProxy service. {{enum}} The {{enum|Error}} value MAY be used by the CPE to indicate a locally defined error condition. {{numentries}} {{numentries}} {{numentries}} {{numentries}} {{numentries}} {{numentries}} Specifies the Listen configurations of the RadSecProxy service for each type of {{param|Protocol}}. Specifies the listening protocol. The IP interface on which the RadSecProxy service listen for the corresponding {{param|Protocol}}. Specifies the port used to receive corresponding {{param|Protocol}} packets. UDP {{param|Protocol}} will default to port 1812 and TCP and TLS {{param|Protocol}} will default to 2083. Specifies the source configurations of the RadSecProxy service which is used for connecting to servers in order to send messages for each type of {{param|Protocol}}. Specifies the source Protocol of the RadSecProxy service. The IP interface which the RadSecProxy service uses as the source for the corresponding {{param|Protocol}}. Specifies the port used to receive corresponding {{param|Protocol}} packets. UDP {{param|Protocol}} will default to port 1812 and TCP and TLS {{param|Protocol}} will default to 2083. Realm block configuration of the RadSecProxy service as defined in {{bibref|RFC6614|Appendix B}}. Enable or disable this {{object}} instance. The status of this entry. {{enum}} The {{enum|Error}} value MAY be used by the CPE to indicate a locally defined error condition. Specifies the regular expression pattern against which the Username attribute in the Access-Request is matched to determine the corresponding Realm block. This is used to determine the {{param|Server}} to which the Access-Request should be forwarded. The format is implementation specific. Specifies the server to which requests for this realm should be forwarded. If no server is configured, the RadSecProxy service will deny all Access-Requests for this realm. Specifies the accounting Server. If no accounting Server is configured, the RadSecProxy service will silently ignore all Accounting-Requests for this realm unless {{param|AccountingResponse}} is set to {{true}}. Enable sending Accounting-Response instead of ignoring Accounting-Requests when no accounting servers are configured. Server block configuration of the RadSecProxy service. Enable or disable this {{object}} instance. The status of this entry. {{enum}} The {{enum|Error}} value MAY be used by the CPE to indicate a locally defined error condition. Specifies the Fully Qualified Domain Name (FQDN) or IP address of the RADIUS server that the RadSecProxy service communicates with. Specifies the type (protocol) of the Server. Specifies the port (UDP/TCP) to connect to. If omitted, UDP and TCP will default to 1812 while TLS and DTLS {{bibref|RFC9147}} will default to 2083. Specifies the shared RADIUS key with the client. This option is optional for TLS/DTLS and if omitted will default to "radsec". Note that using a secret other than "radsec" for TLS is a violation of the standard {{bibref|RFC6614}} and that the proposed standard for DTLS {{bibref|RFC9147}} stipulates that the secret must be "radius/dtls". Specifies the TLS Block to be used for this server. Client block configuration of the RadSecProxy service. Enable or disable this {{object}} instance. The status of this entry. {{enum}} The {{enum|Error}} value MAY be used by the CPE to indicate a locally defined error condition. Specifies the Fully Qualified Domain Name (FQDN) or IP address of RADIUS client that the RadSecProxy service communicates with. Specifies the type (protocol) of the Client. Specifies the shared RADIUS key with the server. This option is optional for TLS/DTLS and if omitted will default to "radsec". Note that using a secret other than "radsec" for TLS is a violation of the standard {{bibref|RFC6614}} and that the proposed standard for DTLS stipulates that the secret must be "radius/dtls". Specifies the TLS Block to be used by this client. TLS block configuration of the RadSecProxy service. Specifies the TLS/DTLS protocol version to be used by the RadSecProxy service. Support Secure Socket Layer version 3 (SSLv3). Support Transport Layer Security version 1.0 only. Support Transport Layer Security version 1.0 or later version. Support Transport Layer Security version 1.1 only. Support Transport Layer Security version 1.1 or later versions. Support Transport Layer Security version 1.2 only. Support Transport Layer Security version 1.2 or later version. Support Transport Layer Security version 1.3 only. Support Transport Layer Security version 1.3 or later version. Support Datagram Transport Layer Security version 1.0 only. Support Datagram Transport Layer Security version 1.0 or later version. Support Datagram Transport Layer Security version 1.2 only. Support Datagram Transport Layer Security version 1.2 or later version.