how to orginate disconnect message from NAS [radius client]
Hi, I want to initiate the disconnect message from NAS client instead of radius server. Is there any way to do? The rfc says that disconnect message will be sent from RADIUS server to NAS client. But I want to do in reverse way for my application. I appreciate your help. Sundar Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com
On 29 Aug 2011, at 21:02, <sundararaman.dheivanayagam@wipro.com> <sundararaman.dheivanayagam@wipro.com> wrote:
Hi,
I want to initiate the disconnect message from NAS client instead of radius server. Is there any way to do? The rfc says that disconnect message will be sent from RADIUS server to NAS client. But I want to do in reverse way for my application.
Are you talking about proxying a disconnect message? Why would you want to send a disconnect message from a NAS? Thats what Accounting-Request STOP packets are for? -Arran
I appreciate your help.
Sundar Please do not print this email unless it is absolutely necessary.
The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.
WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.
www.wipro.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter
There is no specific way. Instead Account-Stop request can be sent to RADIUS server Rgds, Sakthi On Tue, Aug 30, 2011 at 12:32 AM, <sundararaman.dheivanayagam@wipro.com>wrote:
Hi,
I want to initiate the disconnect message from NAS client instead of radius server. Is there any way to do? The rfc says that disconnect message will be sent from RADIUS server to NAS client. But I want to do in reverse way for my application.
I appreciate your help.
Sundar
* Please do not print this email unless it is absolutely necessary. *****
The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.
WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.
www.wipro.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
Sakthi, Thanks for the response. NAS will send account-stop request to RADIUS, which in turn trigger the disconnect message [release the ip address assigned earlier] to NAS. Thanks, Sundar From: freeradius-devel-bounces+sundararaman.dheivanayagam=wipro.com@lists.free radius.org [mailto:freeradius-devel-bounces+sundararaman.dheivanayagam=wipro.com@li sts.freeradius.org] On Behalf Of sakthi krishnan Sent: Tuesday, August 30, 2011 6:57 AM To: FreeRadius developers mailing list Subject: Re: how to orginate disconnect message from NAS [radius client] There is no specific way. Instead Account-Stop request can be sent to RADIUS server Rgds, Sakthi On Tue, Aug 30, 2011 at 12:32 AM, <sundararaman.dheivanayagam@wipro.com> wrote: Hi, I want to initiate the disconnect message from NAS client instead of radius server. Is there any way to do? The rfc says that disconnect message will be sent from RADIUS server to NAS client. But I want to do in reverse way for my application. I appreciate your help. Sundar Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com
what is your question here Thx, Sakthi On Tue, Aug 30, 2011 at 7:46 PM, <sundararaman.dheivanayagam@wipro.com>wrote:
Sakthi,****
Thanks for the response. NAS will send account-stop request to RADIUS, which in turn trigger the disconnect message [release the ip address assigned earlier] to NAS.****
Thanks,****
Sundar****
*From:* freeradius-devel-bounces+sundararaman.dheivanayagam= wipro.com@lists.freeradius.org [mailto: freeradius-devel-bounces+sundararaman.dheivanayagam= wipro.com@lists.freeradius.org] *On Behalf Of *sakthi krishnan *Sent:* Tuesday, August 30, 2011 6:57 AM *To:* FreeRadius developers mailing list *Subject:* Re: how to orginate disconnect message from NAS [radius client] ****
** **
There is no specific way. Instead Account-Stop request can be sent to RADIUS server****
** **
Rgds,****
Sakthi****
On Tue, Aug 30, 2011 at 12:32 AM, <sundararaman.dheivanayagam@wipro.com> wrote:****
Hi,****
****
I want to initiate the disconnect message from NAS client instead of radius server. Is there any way to do? The rfc says that disconnect message will be sent from RADIUS server to NAS client. But I want to do in reverse way for my application.****
****
I appreciate your help.****
****
Sundar****
*Please do not print this email unless it is absolutely necessary. *****
The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. ****
WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. ****
www.wipro.com ****
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html****
** **
* Please do not print this email unless it is absolutely necessary. *****
The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.
WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.
www.wipro.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
On Tue, Aug 30, 2011 at 07:46:45PM +0530, sundararaman.dheivanayagam@wipro.com wrote:
Thanks for the response. NAS will send account-stop request to RADIUS, which in turn trigger the disconnect message [release the ip address assigned earlier] to NAS.
I think there is some confusion going on here. An Accounting-Stop message is an indication from the NAS that the session has ended. It does *not* trigger a Disconnect-Request message. A Disconnect-Request message is from the radius server to the NAS, to forcibly disconnect them on demand. http://wiki.freeradius.org/Disconnect-Messages http://www.ietf.org/rfc/rfc3576.txt It's something of a frig, and in my experience rarely implemented (you'd probably be better off using SNMP to disconnect a user, or using the Session-Timeout attribute if all you want to do is disconnect them after a certain amount of time online) Regards, Brian.
On 31 Aug 2011, at 13:41, Brian Candler wrote:
On Tue, Aug 30, 2011 at 07:46:45PM +0530, sundararaman.dheivanayagam@wipro.com wrote:
Thanks for the response. NAS will send account-stop request to RADIUS, which in turn trigger the disconnect message [release the ip address assigned earlier] to NAS.
I think there is some confusion going on here.
An Accounting-Stop message is an indication from the NAS that the session has ended. It does *not* trigger a Disconnect-Request message.
Well it *can*, for example in simultaneous use scenarios where you want to disconnect all other open sessions for a user if they start a new accounting session. But its all server / config specific.
A Disconnect-Request message is from the radius server to the NAS, to forcibly disconnect them on demand.
http://wiki.freeradius.org/Disconnect-Messages http://www.ietf.org/rfc/rfc3576.txt
It's something of a frig, and in my experience rarely implemented (you'd probably be better off using SNMP to disconnect a user, or using the Session-Timeout attribute if all you want to do is disconnect them after a certain amount of time online)
Agreed. As i've said numerous times in previous threads, the only time you ever need to use DM over SNMP is in an environment with intermediary RADIUS proxies, or if your NAS doesn't implement the MIBs necessary to disconnect a user, but does support DM... so far i've never seen one of those in the wild. Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter
participants (4)
-
Arran Cudbard-Bell -
Brian Candler -
sakthi krishnan -
sundararaman.dheivanayagam＠wipro.com