Hi, We use a pair of BNGs to provide redundancy. The BNGs terminate PPPoE and now also IPoE sessions. Since dropping a large number of subs is disruptive we tend to use PADO-delay for the PPPoE ones to move them slowly from one BNG to the other - we set the delay about week in advance. There is no such option for IPoE since the BNG starts to build the session bindings (including querying radius) as soon as it sees either DHCP or ARP packets. If I could delay the accept on one BNG then the other one would've built the bindings and allowed DHCP through (or responded to ARP). This would effectively start moving the sessions onto the other BNG. I realise I can call an external script (exec bash with sleep 5 or sth) but it doesn't feel like an elegant solution (not to mention the load this will cause). kind regards Pshem On Thu, 26 May 2016 at 17:45 Herwin Weststrate <herwin@quarantainenet.nl> wrote:
On 26-05-16 07:24, Pshem Kowalczyk wrote:
Hi,
I would like to delay access-accept responses to some requests (we have multiple ones coming simultaneously from 2 BNGs, due to the way access network is built). I found the FreeRADIUS-Response-Delay and FreeRADIUS-Response-Delay-USec attributes, but I'm clearly doing something wrong, as the accept is sent immediately:
{...}
(I've tried various combinations of the control/reply USec/Sec) Delay on Auth-Reject works as expected.
googling didn't turn up any examples either. I'm running 3.0.11 - how are these attributes supposed to be used?
These attributes only work for Access-Rejects and DHCP-NAKs. It could be changed to allow things like accept to delay too, but I think this is such an unusual use case that there is probably a better solution for it.
-- Herwin Weststrate - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html