Accounting Packets and Anonymous Identity

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Sun Feb 5 20:43:16 CET 2017


Hi,

> The problem is that if RADIUS does not know who is using how much, it 
> wont be able to keep track of network usage and therefore enforce 
> quotas. Somehow, I need to find out what the true user name is. What can 
> I do with a packet labelled "anonymous"? I made a promise to the owner 
> of the site, but have failed to deliver because of the NAS.

you see other things - the Calling-Station-Id - that can be used to limit the
data.... you auth'd this person,yes?  if so, then you saw their real ID in the inner
part of the EAP - in which case, you can you that in the access accept packet so the
NAS knows what to tag eg accounting packet with.

and you are using 2.2.x to deliver services?  upgrade.


alan


More information about the Freeradius-Users mailing list