Session-Octets-Limits

Mordor Networks mordor.networks at gmail.com
Wed May 31 11:24:33 CEST 2006


>
> Its working and the user disconnect when reachs the limit but now if the
> user disconnect and reconnect it will all start over is there a way to lock
> the account?


so that the user wont be able to connect again?

________________________________________
> From: freeradius-users-bounces+edvin.seferovic=
> kolp.at at lists.freeradius.org
> [mailto:
> freeradius-users-bounces+edvin.seferovic=kolp.at at lists.freeradius.or
> g] On Behalf Of Mordor Networks
> Sent: Mittwoch, 31. Mai 2006 09:47
> To: FreeRadius users mailing list
> Subject: Re: Session-Octets-Limits
>
>
> On 5/31/06, Seferovic Edvin <edvin.seferovic at kolp.at> wrote:
> Session-Octets-Limit should be as integer or "octets" in the dictionary
> file. Guess what octets mean ;-) Bytes of course ! And also be aware of
> the
> limitation of an integer.
> Sorry about the extra mail , i have this in both of dic files
>
> ATTRIBUTE Session-Octets-Limit 227 integer
> ATTRIBUTE Octets-Direction 228 integer
>
> and yes sir i know that ppp should do the disconnection but i'm affradi
> that
> i have something
> wrong in my dictionary files , so shall i add something else to the
> attributes above?
> Disconnection should be done by PPP which is called by rp-pppoe server.
> Please - look at log files of the rp-pppoe server. Set the limit to 100000
> (
> 100 kB ) and open a few pages. See if you get disconnected and what
> messages
> are being logged. As already said - this is out of the freeradius range !
> regards
> Regards,
> Edvin
>
> PS: one mail to the mailing list should be enough. I get the mails from
> the
> list too, so you do NOT need to send me an extra mail ;-)
>
> ________________________________________
> From: Mordor Networks [mailto:mordor.networks at gmail.com]
> Sent: Mittwoch, 31. Mai 2006 09:19
>
> To: edvin.seferovic at kolp.at; FreeRadius users mailing list
> Subject: Re: Session-Octets-Limits
>
> ok thanks a lit edvin but one more question please
>
> Session-Octets-Limit := 1000 for example the "1000" = byte or kbyte or MB
> ?
> coz everything thing seems to be working i can see the attribute in the
> radius log and in the raddattr file and in the sql table but it is not
> disconnecting the user :|
> On 5/31/06, Seferovic Edvin <edvin.seferovic at kolp.at> wrote:
> shall i added it to the radclient on the nas box ?
>
> YES ! Both server and client have to know about what attribute are you
> "talking about".
>
> Regards,
>
> Edvin
>
> ________________________________________
> From: Mordor Networks [mailto:mordor.networks at gmail.com]
> Sent: Mittwoch, 31. Mai 2006 08:46
> To: edvin.seferovic at kolp.at; FreeRadius users mailing list
> Subject: Re: Session-Octets-Limits
>
>
> On 5/31/06, Seferovic Edvin <edvin.seferovic at kolp.at> wrote:
>
>
> Hi Edvin
> Session-Octets-Limit should only be in the reply table ( it is not a value
> that should be checked - right ? ).
> yes youre right
> If the freeradius replies the attribute - the freeradius is finished with
> his task. Now your RP-PPPoE server and the radiusclient should do the rest
> of the work. Traffic limiting is done with PPProtocol on your NAS ( your
> pppoe server ). Be sure that the radiusclient also has the attribute in
> his
> dictionary file. Look at the output of the ppp and pppoe ( increase the
> log
> level - or put both in debug mode ).
> i added the attributes to the /usr/local/share/dictionary file shall i
> added it to the radclient on the nas box ?
>
> Regards
>
> It seems that this is not problem of freeradius anymore !
>
> Regards,
>
> Edvin
>
> ________________________________________
> From: freeradius-users-bounces+edvin.seferovic=
> kolp.at at lists.freeradius.org
> [mailto:
> freeradius-users-bounces+edvin.seferovic=kolp.at at lists.freeradius.or
> g ] On Behalf Of Mordor Networks
> Sent: Dienstag, 30. Mai 2006 22:56
> To: FreeRadius users mailing list
> Subject: Session-Octets-Limits
>
> Hello users
>
> I'm trying to add Session-Octets-Limit to limit the user bandwidth i add
> Session-Octets-Limit := 1000 in radcheck and radreply
> and i can see it in the radiusd -X and in the radattr file :
> Framed-IP-Address
>
>
>
>
> 70.70.70.70
>
>
>
>
>
>
>
>
> Session-Octets-Limit 825241648
>
>
>
>
>
>
>
> Framed-Protocol PPP
>
>
>
>
>
>
>
> Framed-IP-Netmask 255.255.255.255
>
>
>
>
>
>
>
>
>
> Framed-MTU 1500
>
>
>
>
>
>
>
> Session-Timeout 43200
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> Idle-Timeout 1200
>
>
>
>
>
>
>
> Port-Limit 1
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> But it is not disconnecting the user when reach the limit , can someone
> help
> me please?
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060531/317ad8fe/attachment.html>


More information about the Freeradius-Users mailing list