<div dir="ltr">Thanks for your reply. <div><br></div><div>This is what I see for martin, you can see every 1 or 2 minutes, radius server is getting auth request</div><div><br></div><div><div>Sep 24 11:47:04 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)</div><div>Sep 24 11:47:04 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)</div><div>Sep 24 11:47:06 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)</div><div>Sep 24 11:47:06 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)</div><div>Sep 24 11:47:28 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)</div><div>Sep 24 11:47:28 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)</div><div>Sep 24 11:47:35 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)</div><div>Sep 24 11:47:35 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)</div><div>Sep 24 11:48:10 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)</div><div>Sep 24 11:48:10 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)</div><div>Sep 24 11:48:14 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)</div><div>Sep 24 11:52:21 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)<br></div><div>Sep 24 11:52:21 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)</div><div>Sep 24 11:57:48 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)</div><div>Sep 24 11:57:49 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)</div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Sep 26, 2014 at 11:52 AM, Alan DeKok <span dir="ltr"><<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">Rando Nakarmi wrote:<br>
> For example, my phone got connected - authenticated, then i locked the<br>
> phone, after a while I open the phone, when it re-scan the network it<br>
> actually sends the authentication request- gets re-authenticated.<br>
<br>
</span> That's how it works. The phone disconnects from the access point in<br>
order to save battery life. Since it's disconnected, when it goes back<br>
online, it has to re-connect and re-authenticate.<br>
<span class=""><br>
> Is there a way, it only authenticates once, if you are in same wireless<br>
> access point ? I meant, when device re-scans the network and if you are<br>
> with the same Wireless access point not to send the auth request to the<br>
> server over and and over ?<br>
<br>
</span> You can use session caching. See the "cache" subsection of the "eap"<br>
module. It will make later authentications faster. But it won't stop<br>
them from coming.<br>
<br>
In this case, the WiFi phone is asking for re-authentication, and the<br>
NAS is requiring re-authentication. RADIUS is just receiving the<br>
authentication requests, and processing them.<br>
<span class="HOEnZb"><font color="#888888"><br>
Alan DeKok.<br>
</font></span><div class="HOEnZb"><div class="h5">-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br></div>