Hi Guys, We have been talking to a provider in the UK around facilitating POD on our APN but they have advised that they don't support POD on their IoT framework as a standard. They however mentioned that some of their clients use "mid-session access reject" - something that I have never heard of before and thinking logically, the only reject I know of would be during the Authentication process, but maybe I just haven't heard nor seen anything like that before. Does anyone know what "mid-session access reject" means and/or how it works? I have searched the Internet for clues and the only clue I could find was in the O'Reilly book called "Radius" that states :- "The Access-Reject can be sent at any time during a session, which makes them ideal for enforcing connection time limits. However, not all equipment supports receiving the Access-Reject during a pre-established connection." Is this something that is possible from freeRadius? Thanks in advance, Gabriel
On Apr 21, 2021, at 9:40 AM, Gabriel Marais <gabriel.j.marais@gmail.com> wrote:
We have been talking to a provider in the UK around facilitating POD on our APN but they have advised that they don't support POD on their IoT framework as a standard.
It's not like the relevant standards are a decade old/ :)
They however mentioned that some of their clients use "mid-session access reject" - something that I have never heard of before and thinking logically, the only reject I know of would be during the Authentication process, but maybe I just haven't heard nor seen anything like that before.
Does anyone know what "mid-session access reject" means and/or how it works?
It doesn't exist. It doesn't work. I've never heard of it before. They don't know what they're talking about. Ask them to explain in detail how it works. If the answer makes sense, then it's already part of the RADIUS standard, and FreeRADIUS can do it. If the answer doesn't make sense, then they're not dong it, and it doesn't work. Alan DeKok.
Thanks Alan for the quick reply. I thought as much but I had to make sure. I will go back to them to explain a bit more what they mean. On Wed, Apr 21, 2021 at 3:45 PM Alan DeKok <aland@deployingradius.com> wrote:
On Apr 21, 2021, at 9:40 AM, Gabriel Marais <gabriel.j.marais@gmail.com> wrote:
We have been talking to a provider in the UK around facilitating POD on our APN but they have advised that they don't support POD on their IoT framework as a standard.
It's not like the relevant standards are a decade old/ :)
They however mentioned that some of their clients use "mid-session access reject" - something that I have never heard of before and thinking logically, the only reject I know of would be during the Authentication process, but maybe I just haven't heard nor seen anything like that before.
Does anyone know what "mid-session access reject" means and/or how it works?
It doesn't exist. It doesn't work. I've never heard of it before. They don't know what they're talking about.
Ask them to explain in detail how it works. If the answer makes sense, then it's already part of the RADIUS standard, and FreeRADIUS can do it.
If the answer doesn't make sense, then they're not dong it, and it doesn't work.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Gabriel, On Wed, Apr 21, 2021 at 11:10:37PM +0930, Gabriel Marais wrote:
Hi Guys,
We have been talking to a provider in the UK around facilitating POD on our APN but they have advised that they don't support POD on their IoT framework as a standard. They however mentioned that some of their clients use "mid-session access reject" - something that I have never heard of before and thinking logically, the only reject I know of would be during the Authentication process, but maybe I just haven't heard nor seen anything like that before.
Does anyone know what "mid-session access reject" means and/or how it works?
I don't know if they called it a "mid-session access reject", but I've got a customer with a NAS that resends the Access-Request for each online session once a minute and if it gets an Access-Reject then it disconnects the session. Regards, Geoffrey.
On Apr 22, 2021, at 2:22 PM, Geoffrey D. Bennett <g@netcraft.com.au> wrote:
I don't know if they called it a "mid-session access reject", but I've got a customer with a NAS that resends the Access-Request for each online session once a minute and if it gets an Access-Reject then it disconnects the session.
That may be what they're referring to. It's a terrible idea, too. :( Alan DeKok.
On Apr 22, 2021, at 1:34 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Apr 22, 2021, at 2:22 PM, Geoffrey D. Bennett <g@netcraft.com.au> wrote:
I don't know if they called it a "mid-session access reject", but I've got a customer with a NAS that resends the Access-Request for each online session once a minute and if it gets an Access-Reject then it disconnects the session.
That may be what they're referring to.
It's a terrible idea, too. :(
So pretty much setting a default value for Session-Timeout... Why not just honour Session-Timeout *sigh*. -Arran
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Gabriel Marais -
Geoffrey D. Bennett