J-P Raymond wrote:
Ok I'll look at it thanks but
what about Disconnect message ?
I pull this info from my log
User-Name = xxx@xxxx.com <mailto:xxx@xxxx.com> Acct-Status-Type = Start Acct-Session-Id = "12345678.90.123" NAS-Identifier = "router" NAS-IP-Address = 200.10.50.100 NAS-Port-Type = Virtual Framed-IP-Address = 200.10.50.1 Acct-Delay-Time = 0 Client-IP-Address = 200.10.50.100 Acct-Unique-Session-Id = "8d120506b2972302"
I put this in packet.txt
I tried : cat packet.txt | radclient -x 200.10.50.100:3799 disconnect mysecret // But radclient keep retrying and it doesn't seams to work !
on the web site it mentioned I need disconnect enabled Nas ?
Someone already tried this ?
http://www.ieee802.org/1/files/public/MIBs/802-1x-2004-mib.txt
Thanks
Date: Wed, 27 Feb 2008 21:31:06 +0000 To: freeradius-users@lists.freeradius.org Subject: Re: Force user disconnect on NAS From: A.Cudbard-Bell@sussex.ac.uk
J-P Raymond wrote:
Question,
Is it possible from the radius server to force a user to disconnect ?
If yes what do I need to do that ?
Normal Client --> NAS --> Radius server
I would like to send a request Radius server --> NAS X Client
Thanks for your time
- List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html Yes but your NAS needs to support CoA (Change of Authorisation) , and your RADIUS server needs to support it too; currently FR doesn't.
Your best bet is to use the standard 802.1x mib and force re-authentication using SNMP. Most NAS implement this MIB just people seem to overlook it...
Regards, Arran
-- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html