Hi, I need to send a COA to another NAS during the section "authorize { }", below my current approach. 1) I receive the "Access-Request" Sun Oct 4 18:19:33 2015 : Debug: (0) Received Access-Request Id 227 from 10.1.2.128:42305 to 192.168.56.90:1812 length 46 Sun Oct 4 18:19:33 2015 : Debug: (0) User-Name = "ca:de:ca:fe:00:01" Sun Oct 4 18:19:33 2015 : Debug: (0) Acct-Session-Id = "12345" Sun Oct 4 18:19:33 2015 : Debug: (0) session-state: No State attribute Sun Oct 4 18:19:33 2015 : Debug: (0) # Executing section authorize from file /etc/freeradius/sites-enabled/mcare-nas-portal Sun Oct 4 18:19:33 2015 : Debug: (0) authorize { 2) Build a "coa" packet and build to the home-server. *Sun Oct 4 18:19:33 2015 : Debug: (0) update coa {* *Sun Oct 4 18:19:33 2015 : Debug: (0) &Packet-Type := CoA-Request* *Sun Oct 4 18:19:33 2015 : Debug: (0) &Acct-Session-Id := "12345"* *Sun Oct 4 18:19:33 2015 : Debug: (0) &Home-Server-Pool := coa_pool_wifilabs* *Sun Oct 4 18:19:33 2015 : Debug: (0) } # update coa = noop* Sun Oct 4 18:19:33 2015 : Debug: (0) modsingle[authorize]: calling handled (rlm_always) for request 0 Sun Oct 4 18:19:33 2015 : Debug: (0) modsingle[authorize]: returned from handled (rlm_always) for request 0 Sun Oct 4 18:19:33 2015 : Debug: (0) [handled] = handled Sun Oct 4 18:19:33 2015 : Debug: (0) } # authorize = handled 3) From this point, I can't figure out about the best way to wait and only responds after coa feedback. Sun Oct 4 18:19:33 2015 : Debug: (0) There was no response configured: rejecting request Sun Oct 4 18:19:33 2015 : Debug: (0) Using Post-Auth-Type Reject Sun Oct 4 18:19:33 2015 : Debug: (0) Post-Auth-Type sub-section not found. Ignoring. 4) Below the behavior of home-server (mcare-nas-radius-wifilabs)... was sent with success! Sun Oct 4 18:19:33 2015 : Debug: (0) # Executing group from file /etc/freeradius/sites-enabled/mcare-nas-portal Sun Oct 4 18:19:33 2015 : Debug: (0) server mcare-nas-radius-wifilabs { Sun Oct 4 18:19:33 2015 : Debug: (0) Empty pre-proxy section in virtual server "mcare-nas-radius-wifilabs". Using default return values. Sun Oct 4 18:19:33 2015 : Debug: (0) } Sun Oct 4 18:19:33 2015 : Debug: (0) proxy: Trying to allocate ID (0/2) Sun Oct 4 18:19:33 2015 : Debug: (0) proxy: request is now in proxy hash Sun Oct 4 18:19:33 2015 : Debug: (0) proxy: allocating destination 10.11.10.22 port 1812 - Id 25 Sun Oct 4 18:19:33 2015 : Debug: (0) session-state: Nothing to cache *Sun Oct 4 18:19:33 2015 : Debug: (0) Sent CoA-Request Id 25 from 0.0.0.0:57493 <http://0.0.0.0:57493> to 10.11.10.22:1812 <http://10.11.10.22:1812> length 27* Sun Oct 4 18:19:33 2015 : Debug: (0) Acct-Session-Id := "12345" Sun Oct 4 18:19:33 2015 : Debug: (0) Delaying response for 1.000000 seconds Sun Oct 4 18:19:33 2015 : Debug: Waking up in 0.3 seconds. Sun Oct 4 18:19:33 2015 : Proxy: (0) Marking home server 10.11.10.22 port 1812 alive Sun Oct 4 18:19:33 2015 : Debug: (0) Clearing existing &reply: attributes *Sun Oct 4 18:19:33 2015 : Debug: (0) Received CoA-ACK Id 25 from 10.11.10.221812 to 192.168.56.90:57493 <http://192.168.56.90:57493> length 75* Sun Oct 4 18:19:33 2015 : Debug: (0) Reply-Message = "AAA->NOKIA() listen::type=coa,port::1812 pack-type=(CoA-Request)" 5) I would like to get the received response from home-server and threat to reponse Access-Accept (if CoA-ACK) or Access-Reject (if CoA-NAK) Sun Oct 4 18:19:33 2015 : Debug: (0) server mcare-nas-radius-wifilabs { Sun Oct 4 18:19:33 2015 : Debug: (0) # Executing section post-proxy from file /etc/freeradius/sites-enabled/mcare-nas-radius-wifilabs Sun Oct 4 18:19:33 2015 : Debug: (0) post-proxy { Sun Oct 4 18:19:33 2015 : Debug: (0) update control { Sun Oct 4 18:19:33 2015 : Debug: (0) &Auth-Type := Accept Sun Oct 4 18:19:33 2015 : Debug: (0) &Response-Packet-Type := Access-Accept Sun Oct 4 18:19:33 2015 : Debug: (0) &Packet-Type := Access-Accept Sun Oct 4 18:19:33 2015 : Debug: (0) } # update control = noop Sun Oct 4 18:19:33 2015 : Debug: (0) update request { Sun Oct 4 18:19:33 2015 : Debug: (0) &Auth-Type := Accept Sun Oct 4 18:19:33 2015 : Debug: (0) &Response-Packet-Type := Access-Accept Sun Oct 4 18:19:33 2015 : Debug: (0) &Packet-Type := Access-Accept Sun Oct 4 18:19:33 2015 : Debug: (0) } # update request = noop Sun Oct 4 18:19:33 2015 : Debug: (0) update proxy-reply { Sun Oct 4 18:19:33 2015 : Debug: (0) &Auth-Type := Accept Sun Oct 4 18:19:33 2015 : Debug: (0) &Response-Packet-Type := Access-Accept Sun Oct 4 18:19:33 2015 : Debug: (0) &Packet-Type := Access-Accept Sun Oct 4 18:19:33 2015 : Debug: (0) } # update proxy-reply = noop Sun Oct 4 18:19:33 2015 : Debug: (0) modsingle[post-proxy]: calling updated (rlm_always) for request 0 Sun Oct 4 18:19:33 2015 : Debug: (0) [handled] = handled Sun Oct 4 18:19:33 2015 : Debug: (0) } # post-proxy = handled Sun Oct 4 18:19:33 2015 : Debug: (0) } Sun Oct 4 18:19:33 2015 : Debug: (0) Cleaning up request packet ID 227 with timestamp +286 Sun Oct 4 18:19:33 2015 : Debug: Waking up in 0.1 seconds. Sun Oct 4 18:19:33 2015 : Debug: Waking up in 0.6 seconds. I have tried all lists "request", "proxy-reply" and "control".... but, don't work! Sun Oct 4 18:19:34 2015 : Debug: (0) Sending delayed response Sun Oct 4 18:19:34 2015 : Debug: (0) Sent Access-Reject Id 227 from 192.168.56.90:1812 to 10.1.2.128:42305 length 20 Sun Oct 4 18:19:34 2015 : Debug: Waking up in 3.9 seconds. Any suggestions are welcome! -- Jorge Pereira