Session-Timeout Problem

[Brian Candler]

On 02/02/2017 14:40, Alan DeKok wrote:
>> Who is supposed to inform who when the session is over?
>    FreeRADIUS, via Session-Timeout.
For clarity: FreeRADIUS says at the *start* of the session that the time 
limit is 10 minutes.

But when that time is over - or sooner if the user terminates the 
session - it is the NAS which sends an Accounting-Stop packet. Assuming 
the user then tries to re-establish their session, the NAS will also 
send a fresh Access-Request.

So it is the NAS which informs FreeRADIUS of the end of the session, and 
also that the user wants to start a new session.

>> Is the NAS supposed to keep track of this and inform FreeRADIUS, or the other way around?
>    The NAS knows the session timeout only because it's sent in a RADIUS packet.

And again for clarity, it is the NAS's responsibility to enforce the 
session limit, i.e. to actually disconnect the user after 10 minutes.

It's then a by-product of session termination that it sends the 
Accounting-Stop packet.