<div>Hi,</div>
<div> </div>
<div>Still we are facing the same issue, please suggest me the changes has to be done in freeradius.</div>
<div>And also clarify me about radcheck and radreply tables and what all attributes have to be configured in both the tables for verifying the same scenario.</div>
<div> </div>
<div>Thanks & Regards,</div>
<div>Anusha M</div>
<div> </div>
<div><br> </div>
<div class="gmail_quote">On Mon, Nov 24, 2014 at 1:40 PM, Russell Mike <span dir="ltr"><<a href="mailto:radius.sir@gmail.com" target="_blank">radius.sir@gmail.com</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px 0.8ex;PADDING-LEFT:1ex" class="gmail_quote">
<div dir="ltr">
<div>
<div><span style="FONT-FAMILY:verdana,sans-serif">Hi <br><br></span></div><span style="FONT-FAMILY:verdana,sans-serif">i am sorry, i have delayed you enough already. i want to put efforts for 1 hour today to resolve your issue. have you fix the problem or still have issues? <br></span></div><span style="FONT-FAMILY:verdana,sans-serif">Thanks</span><br></div>
<div class="HOEnZb">
<div class="h5">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Nov 21, 2014 at 6:36 PM, Russell Mike <span dir="ltr"><<a href="mailto:radius.sir@gmail.com" target="_blank">radius.sir@gmail.com</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px 0.8ex;PADDING-LEFT:1ex" class="gmail_quote">Hi
<div>I could not read the list today, there is no such limit. You can do all that eg: data volume quota limit, user can use their time in multiple sessions. What kind of NAS you use? We will do it, no issue. Check list will follow this email. </div>
<div><br></div>
<div>Prabhpal
<div>
<div><br><br>On Thursday, November 20, 2014, anusha mule <<a href="mailto:anusha.mule9988@gmail.com" target="_blank">anusha.mule9988@gmail.com</a>> wrote:<br>
<blockquote style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px 0.8ex;PADDING-LEFT:1ex" class="gmail_quote">
<div><font face="georgia,serif">Hi Prabhpal,</font></div>
<div><font face="Georgia"></font> </div>
<div><font face="Georgia">Thanks for your reply.</font></div>
<div><font face="Georgia"></font> </div>
<div>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">Yes, we have the setup-done with Free RADIUS and MySQL enabled.</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">With the users file and radacct table, we are able authenticate and log the RADIUS accounting messages.</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">We have the User Polices based on Time and Data usage.</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">That is we want to limit the users based on their duration of access and usage of data over a multiple session establishment.</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">Hence, kindly provide your valuable inputs to acheive this with Free RADIUS - MySQL settings.</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">Note :</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">One thing is that - we read "sql_counter" module is useful to limit the time a user can spend daily, weekly, or monthly on the network.</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">Has sql_counter has problems in limiting a user's data usage or accounting the duration used in the each of the session establishment and provide the access.</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"></font> </p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"></font> </p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">Thanks & Regards,</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">Anusha M</font></p></div>
<div> </div>
<div> </div>
<div><br></div>
<div class="gmail_quote">On Wed, Nov 19, 2014 at 4:29 PM, Russell Mike <span dir="ltr"><<a>radius.sir@gmail.com</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px 0.8ex;PADDING-LEFT:1ex" class="gmail_quote">
<div dir="ltr">
<div>
<div><span style="FONT-FAMILY:georgia,serif">Hi Anusha<br><br></span></div><span style="FONT-FAMILY:georgia,serif">You are right, this is how it works. You need rlm_sqlcounter setup to achieve that. Do you already have MySQL FreeRADIUS working setup? Authentication & Accounting with MySQL ? Please note, accounting must work with MySQL so that FreeRADIUS can calculate the time. please let me know if you already have above. i can then help further. <br><br></span></div><span style="FONT-FAMILY:georgia,serif">Thanks / Prabhpal Singh </span><br></div>
<div class="gmail_extra"><br>
<div class="gmail_quote">
<div>
<div>On Wed, Nov 19, 2014 at 9:27 AM, anusha mule <span dir="ltr"><<a>anusha.mule9988@gmail.com</a>></span> wrote:<br></div></div>
<blockquote style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px 0.8ex;PADDING-LEFT:1ex" class="gmail_quote">
<div>
<div>
<div class="gmail_quote"><br>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">Hi, </font></font></div>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"></font> </div>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">We have the following understanding RADIUS Authentication and Accounting flow :-</font></font></div>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt 0.5in"><span><span><font size="3" face="Calibri">1.</font><span style="FONT:7pt 'Times New Roman'"> </span></span></span><font size="3"><font face="Calibri">When the Access-request from the NAS, Server will search in the radcheck table to check the attributes for the user.</font></font></p>
<p style="MARGIN:0in 0in 0pt 0.5in"><span><span><font size="3" face="Calibri">2.</font><span style="FONT:7pt 'Times New Roman'"> </span></span></span><font size="3"><font face="Calibri">If check attributes are found and its matches to the user, then the server will pull the reply items (Attributes like Bandwidth, Volume, Timeout, etc) from the radreply table for this user and add it in the Access-Accept packet.</font></font></p>
<p style="MARGIN:0in 0in 0pt 0.5in"><span><span><font size="3" face="Calibri">3.</font><span style="FONT:7pt 'Times New Roman'"> </span></span></span><font size="3"><font face="Calibri">On receiving Access-Accept packet, session will get established for the user and Accounting-Start message will get transmitted to the Server.</font></font></p>
<p style="MARGIN:0in 0in 0pt 0.5in"><span><span><font size="3" face="Calibri">4.</font><span style="FONT:7pt 'Times New Roman'"> </span></span></span><font size="3"><font face="Calibri">The server will update the radacct table with Accounting start message.</font></font></p>
<p style="MARGIN:0in 0in 0pt 0.5in"><span><span><font size="3" face="Calibri">5.</font><span style="FONT:7pt 'Times New Roman'"> </span></span></span><font size="3"><font face="Calibri">When the station get disconnected, Session should get deleted and Accounting-Stop message should sent to the Server including user statistics (like Session-time, input-octets, output-octets, etc)in it.</font></font></p>
<p style="MARGIN:0in 0in 0pt 0.5in"><span><span><font size="3" face="Calibri">6.</font><span style="FONT:7pt 'Times New Roman'"> </span></span></span><font size="3"><font face="Calibri">Server will update the radacct table with all the attributed present in the STOP message.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">With let us consider the following simple scenario :-</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">RADIUS Server having User details as </font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">User Name = Joe</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">Password <span> </span>= Joe123</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">Timeout <span> </span>= 30000 Secs</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">Step 1: During the initial connect<span> </span>- User should be authenticated and Access-Accept should contains the attribute value as 30000 Secs, </font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri"><span> </span>mentioning the max duration that the user session is allowed.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri"><span> </span>Once the session is established, RADIUS Accounting Start message is send to RADIUS server.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri"><span> </span>Next let us say, User has been disconnected after 20000 Secs.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri"><span> </span>Again, the RADIUS Accounting Stop message with the consumed duration of 20000 Secs shall be send to the RADIUS Server.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">Step 2:<span> </span>Now, when the same user tries to authenticate, he should be authenticated and the Access-Accept provide the Timeout attribute as 10000 Secs ( i.e. 30000 Secs – 20000 Secs)</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri"><span> </span>Here, let us assume the user used the full session duration and get time out.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri"><span> </span>Again, the RADIUS Accounting Stop message with the consumed duration of 10000 Secs shall be send to the RADIUS Server.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri"><span> </span></font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">Step 3:<span> </span>Now, when the same user tries to authenticate, he should be rejected. </font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">How can the above be achieved using radius server configurations.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">Kindly help us in this.</font></font></p><br clear="all">
<div>
<div>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">Thanks in advance.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri"></font></font> </p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="Calibri">Thank you & Regards,</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="Calibri">Anusha M</font></p></div></div></div><br><br></div></div>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br></div><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br><br clear="all"><br>-- <br>
<div>
<div><font color="#cc66cc" face="comic sans ms,sans-serif">Regards,</font></div>
<div><font color="#cc66cc" face="comic sans ms,sans-serif">Anusha M<br></font></div></div></blockquote></div></div></div></blockquote></div><br></div></div></div><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br><br clear="all"><br>-- <br>
<div class="gmail_signature">
<div><font color="#cc66cc" face="comic sans ms,sans-serif">Regards,</font></div>
<div><font color="#cc66cc" face="comic sans ms,sans-serif">Anusha M<br></font></div></div>