HI:
I use
freebsd7.0+mysql+freeradius2.1.4
Can use the raidus data base to be hit by a consumer at the
same time, by verifying with a consumer. But, I am put into use coming to
control a consumer "Simultaneous" in raidus. When condition now is
that second consumers log on,before acctstoptime in billing form renew with
classics. But, nas does not initiate consumer time line information kit. (The
consumer continues using a network). Feel that the radius does not send out
acc-reject or acc-stop Bao Lai stops using a family.
Thank you!
System
localhost# whereis perl
perl: /usr/bin/perl
/usr/local/man/man1/perl.1
localhost# whereis
snmpget
snmpget:
/usr/local/bin/snmpget /usr/local/man/man1/snmpget.1
Cisco config
aaa authentication enable
default none
aaa authentication dot1x default
group radius
aaa authorization network
default group radius
aaa accounting send
stop-record authentication failure
aaa accounting suppress
null-username
aaa accounting
session-duration ntp-adjusted
aaa accounting update
newinfo periodic 5
aaa accounting dot1x
default start-stop group radius
aaa accounting network
default start-stop group radius
aaa accounting connection
default start-stop group radius
aaa accounting resource
default start-stop-failure group radius
interface FastEthernet0/1
switchport mode
access
dot1x pae
authenticator
dot1x port-control
auto
dot1x violation-mode
protect
dot1x timeout
quiet-period 2
dot1x guest-vlan 3
dot1x auth-fail vlan
4
dot1x auth-fail
max-attempts 2
spanning-tree
portfast
redius.conf
# Uncomment simul_count_query
to enable simultaneous use checking
simul_count_query = "SELECT COUNT(*) \
FROM ${acct_table1} \
WHERE username = '%{SQL-User-Name}' \
AND acctstoptime IS NULL"
INSERT INTO
`radius`.`radgroupcheck` (`groupname` ,`attribute` ,`op` ,`value` )VALUES (
'user', 'Simultaneous-Use', ':=', '1');
使用同一账号登录的时候，在mysql的radacct表中发现如下情况！不知道是否正常？（我觉得这个不正常）。
mysql> select
username,acctstarttime,acctstoptime from radacct where
username="jsh";
+----------+---------------------+---------------------+
| username |
acctstarttime |
acctstoptime |
+----------+---------------------+---------------------+
|
jsh | 2009-05-19 07:34:57 | 2009-05-19 07:35:49 |
|
jsh | 2009-05-19 07:35:49 |
NULL
|
+----------+---------------------+---------------------+
2 rows in set (0.00 sec)
mysql>
sites-available/default
accounting {
radutmp
...
sql
....
}
session {
#radutmp
sql
}
…
…..
Mysql query is
radacct,radpostauth
radacct
|
username |
acctstarttime |
acctstoptime |
count(*) |
|
jsh |
2009-05-26 07:45:09 |
NULL |
1 |
radpostauth
|
|
|
|
14 |
jsh |
|
Access-Accept |
2009-05-26 07:30:04 |
|
|
|
|
15 |
jsh |
|
Access-Accept |
2009-05-26 07:45:08 |
|
|
|
|
16 |
jsh |
|
Access-Accept |
2009-05-26 07:45:08 |
Radgroupcheck
|
|
id |
groupname |
attribute |
op |
value |
||
|
|
|
|
1 |
user |
Simultaneous-Use |
:= |
1 |
|
|
|
|
|
|
|
|
|
Nas
|
nasname |
shortname |
type |
ports |
secret |
community |
description |
|
|||||||
|
|
192.168.0.100 |
cisco3560 |
cisco |
1812 |
cisco |
cisco3560 |
RADIUS
Client |
|||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
蒋 曙 |
|
财 讯 传 媒 集 团__信息技术部 地址：北京市朝阳门外大街22号泛利大厦10层 100020 |