FreeRadius-Response-Delay
Hi, I would like to delay access-accept responses to some requests (we have multiple ones coming simultaneously from 2 BNGs, due to the way access network is built). I found the FreeRADIUS-Response-Delay and FreeRADIUS-Response-Delay-USec attributes, but I'm clearly doing something wrong, as the accept is sent immediately: {...} Thu May 26 15:19:17 2016 : Debug: (0) update { Thu May 26 15:19:17 2016 : Debug: (0) &control:FreeRADIUS-Response-Delay := 5 Thu May 26 15:19:17 2016 : Debug: (0) &control:FreeRADIUS-Response-Delay-USec := 500000 Thu May 26 15:19:17 2016 : Debug: (0) &reply:FreeRADIUS-Response-Delay := 5 Thu May 26 15:19:17 2016 : Debug: (0) &reply:FreeRADIUS-Response-Delay-USec := 500000 Thu May 26 15:19:17 2016 : Debug: (0) } # update = noopThu May 26 15:13:54 2016 : Debug: (0) Sent Access-Accept Id 155 from 127.0.0.1:1812 to 127.0.0.1:51976 length 0 Thu May 26 15:19:17 2016 : Debug: (0) } # post-auth = ok Thu May 26 15:19:17 2016 : Debug: (0) Sent Access-Accept Id 0 from 127.0.0.1:1812 to 127.0.0.1:33099 length 0 Thu May 26 15:19:17 2016 : Debug: (0) Cisco-AVPair += "ip:qos-policy-out=add-class(sub,(class-default),police(3000),set-ip-dscp(0),set-cos-inner(0))" {..} (I've tried various combinations of the control/reply USec/Sec) Delay on Auth-Reject works as expected. googling didn't turn up any examples either. I'm running 3.0.11 - how are these attributes supposed to be used? Thx, kind regards Pshem
On 26-05-16 07:24, Pshem Kowalczyk wrote:
Hi,
I would like to delay access-accept responses to some requests (we have multiple ones coming simultaneously from 2 BNGs, due to the way access network is built). I found the FreeRADIUS-Response-Delay and FreeRADIUS-Response-Delay-USec attributes, but I'm clearly doing something wrong, as the accept is sent immediately:
{...}
(I've tried various combinations of the control/reply USec/Sec) Delay on Auth-Reject works as expected.
googling didn't turn up any examples either. I'm running 3.0.11 - how are these attributes supposed to be used?
These attributes only work for Access-Rejects and DHCP-NAKs. It could be changed to allow things like accept to delay too, but I think this is such an unusual use case that there is probably a better solution for it. -- Herwin Weststrate
Hi, We use a pair of BNGs to provide redundancy. The BNGs terminate PPPoE and now also IPoE sessions. Since dropping a large number of subs is disruptive we tend to use PADO-delay for the PPPoE ones to move them slowly from one BNG to the other - we set the delay about week in advance. There is no such option for IPoE since the BNG starts to build the session bindings (including querying radius) as soon as it sees either DHCP or ARP packets. If I could delay the accept on one BNG then the other one would've built the bindings and allowed DHCP through (or responded to ARP). This would effectively start moving the sessions onto the other BNG. I realise I can call an external script (exec bash with sleep 5 or sth) but it doesn't feel like an elegant solution (not to mention the load this will cause). kind regards Pshem On Thu, 26 May 2016 at 17:45 Herwin Weststrate <herwin@quarantainenet.nl> wrote:
On 26-05-16 07:24, Pshem Kowalczyk wrote:
Hi,
I would like to delay access-accept responses to some requests (we have multiple ones coming simultaneously from 2 BNGs, due to the way access network is built). I found the FreeRADIUS-Response-Delay and FreeRADIUS-Response-Delay-USec attributes, but I'm clearly doing something wrong, as the accept is sent immediately:
{...}
(I've tried various combinations of the control/reply USec/Sec) Delay on Auth-Reject works as expected.
googling didn't turn up any examples either. I'm running 3.0.11 - how are these attributes supposed to be used?
These attributes only work for Access-Rejects and DHCP-NAKs. It could be changed to allow things like accept to delay too, but I think this is such an unusual use case that there is probably a better solution for it.
-- Herwin Weststrate - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Herwin Weststrate -
Pshem Kowalczyk