Hi Joey, On Sat, Apr 14, 2012 at 12:06:06AM +0800, ZhenJoey wrote:
The first one, Athoriztion! FreeRadius is AAA server, I know what the Authentication does,I know what the Accounting does, but I dont know what the Athorization does.
Try reading doc/aaa.rst in the source, which gives a good overview. Also, the PDFs on http://aureliengeron.free.fr/livrewifi/ are good - see http://aureliengeron.free.fr/livrewifi/freeradius-en-part3.pdf for example - all of it is good, but p23 onwards might help you the most. It shows how packets make their way through the server.
Second question, the Attribute belong to a NAS or Belong to a user or some is NAS's attribute ,some is user;s attribute?
Attributes/values are passed between the NAS (which is the RADIUS 'client') and the RADIUS server. They have nothing (directly) to do with the end user. Of course, user login information is placed into the attributes by the NAS.
a enviroment variable named "WISPR_BANDWIDTH_DOWN_MAX"of the NAS OS,does any one knows,how the NAS control the bandwidth after set this enviroment varibale???
I suggest you read the documentation on your NAS. The RADIUS server just sends attributes back, and it's up to the NAS to implement what it's told.
and one more question,does anyone have experience of set the Attribute "BANDWIDTH_DOWN_MAX"(of course different name in different NAS) for radreply?, the MAX BANDWIDTH means the NAS have this MAX bandwidth, all user will share these bandwidth? or the specific user whose reply from Radius Server contain this attribute has this limit, there is no affect on other users who do not have this attribute?
It's up to the NAS - read the documentation for that. In terms of coovachilli, setting DEFAULT WISPr-Bandwidth-Max-Up = 1000000, WISPr-Bandwidth-Max-Down = 2000000 in your users file (there are plenty of other ways to do this - unlang, sql, etc) will mean that all users get 1Mbit up and 2Mbit down. You can send these with different values per user if you want. Cheers, Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>