Re: Accounting : server and port 1813

[James Wakefield <jamesw@deakin.edu.au>]

Bruno Costacurta wrote:

> My wifi router is Olitec wf402sg (aka NAS (Network Access Server) : do not 
> hesitate to correct me if I'm wrong).
>
> To resume my assumptions are :
>
> - FreeRadius contains few servers : authorize, accounting (and others ?).

Sort of.  freeradius contains various modules that can be configured so 
that they are invoked to respond to various events (such as receiving an 
Access-Request).  These all combine to support the necessary AAA 
(Authentication, Authorization and Accounting) functions of a RADIUS 
server.  At least, that's how I understand it.

> - the wifi router is the only client of the radius server (at least in a 
> personal or home config like the one I'm referring to).
> - so only the wifi router access authorization port 1812 and accouting port 
> 1813

If your firewall and freeradius' clients.conf are correctly configured, 
yes :)

> - if my wifi router is not able to be configured for accounting my network is 
> not able to do accounting because station(s) cannot contact 1813.

That's correct - at least, you won't be able to do RADIUS accounting 
with your wifi router.  Depending on your network's topology and what 
other equipment you may have you may be able to use another method to 
provide accounting.  Chillispot (http://www.chillispot.org/) might do 
what you want.  You might even be able to use the iptables byte counters 
on your Linux server and route traffic through it if you have no other 
options.


--
James Wakefield,
Unix Administrator, Information Technology Services Division
Deakin University, Geelong, Victoria 3217 Australia.

Phone: 03 5227 8690 International: +61 3 5227 8690
Fax:   03 5227 8866 International: +61 3 5227 8866
E-mail:   james.wakefield@deakin.edu.au
Website:  http://www.deakin.edu.au