Re: Force user disconnect on NAS

[Arran Cudbard-Bell <A.Cudbard-Bell@sussex.ac.uk>]

J-P Raymond wrote:
>     Question,
>      
>     Is it possible from the radius server to force a user to disconnect ?
>      
>     If yes what do I need to do that ?
>      
>     Normal
>     Client --> NAS --> Radius server
>      
>     I would like to send a request
>     Radius server --> NAS  X Client
>      
>     Thanks for your time
>      
>      
>
>
> ------------------------------------------------------------------------
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes but your NAS needs to support CoA (Change of Authorisation) , and 
your RADIUS server needs to support it too; currently FR doesn't.

Your best bet is to use the standard 802.1x mib and force 
re-authentication using SNMP. Most NAS implement this MIB just people 
seem to overlook it...

Regards,
Arran


--
Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk)
Authentication, Authorisation and Accounting Officer
Infrastructure Services | ENG1 E1-1-08 
University Of Sussex, Brighton
EXT:01273 873900 | INT: 3900