Thats not how the RADIUS protocol works. Accounting packets cannot be used to terminate a session, they're used exclusively for accounting. Refer to your NAS's manual to see if it supports CoA (Change of Authorisation) or DM (Disconnect Message). If it doesn't your best bet is using SNMP via perl or a script called when the Accounting-Request is processed. -Arran On 17 Aug 2011, at 13:41, Christoph Thielecke wrote:
Hello,
I want to know how I can tell the nas to logout a user on Accounting packet.
What i have to return at my module to let the nas disable the user?
I have a request like this: Service-Type=Call-Check NAS-Identifier="rad100" NAS-Port=1 NAS-Port-Id="Controlled" NAS-Port-Type=Wireless-802.11 NAS-IP-Address=xx.xx.xx.xx User-Name="user1" Acct-Status-Type=Interim-Update Acct-Session-Id="1313155182" Acct-Session-Time=63 Acct-Delay-Time=0 Acct-Authentic=RADIUS Called-Station-Id="00-1F-D4-xx-xx-xx" Calling-Station-Id="00-1C-4A-xx-xx-xx" Framed-IP-Address=192.168.xx.xx Acct-Input-Packets=20 Acct-Input-Octets=7004 Acct-Output-Packets=24 Acct-Output-Octets=4153 Acct-Unique-Session-Id="16028485e4b3f41e"
With best regards
Christoph -- Linux User Group Wernigerode http://www.lug-wr.de/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter