Hello, I already had a working Freeradius configuration and intend now to install accounting. As far I undestand accounting is a server using port 1813 (as a default value). But where is this value setup on the client ? (ie. 1812 port for autorization is setup and used on the NAS) More generally is there any good doc or sample about accounting configuration or best practices ? Thanks. Bye, Bruno -- Register Linux User 353844 http://counter.li.org/ --
Bruno Costacurta wrote:
Hello,
I already had a working Freeradius configuration and intend now to install accounting. As far I undestand accounting is a server using port 1813 (as a default value). But where is this value setup on the client ? (ie. 1812 port for autorization is setup and used on the NAS)
Depends on your NAS...what do you have? -- James Wakefield, Unix Administrator, Information Technology Services Division Deakin University, Geelong, Victoria 3217 Australia. Phone: 03 5227 8690 International: +61 3 5227 8690 Fax: 03 5227 8866 International: +61 3 5227 8866 E-mail: james.wakefield@deakin.edu.au Website: http://www.deakin.edu.au
On Saturday 11 November 2006 12:05, James Wakefield wrote:
Bruno Costacurta wrote:
Hello,
I already had a working Freeradius configuration and intend now to install accounting. As far I undestand accounting is a server using port 1813 (as a default value). But where is this value setup on the client ? (ie. 1812 port for autorization is setup and used on the NAS)
Depends on your NAS...what do you have?
My wifi router is Olitec wf402sg (aka NAS (Network Access Server) : do not hesitate to correct me if I'm wrong). To resume my assumptions are : - FreeRadius contains few servers : authorize, accounting (and others ?). - the wifi router is the only client of the radius server (at least in a personal or home config like the one I'm referring to). - so only the wifi router access authorization port 1812 and accouting port 1813 - if my wifi router is not able to be configured for accounting my network is not able to do accounting because station(s) cannot contact 1813. I'm correct ? Please do not hesitate to correct me / argument / suggest. Bruno -- Register Linux User 353844 http://counter.li.org/ --
Bruno Costacurta wrote:
My wifi router is Olitec wf402sg (aka NAS (Network Access Server) : do not hesitate to correct me if I'm wrong).
To resume my assumptions are :
- FreeRadius contains few servers : authorize, accounting (and others ?).
Sort of. freeradius contains various modules that can be configured so that they are invoked to respond to various events (such as receiving an Access-Request). These all combine to support the necessary AAA (Authentication, Authorization and Accounting) functions of a RADIUS server. At least, that's how I understand it.
- the wifi router is the only client of the radius server (at least in a personal or home config like the one I'm referring to). - so only the wifi router access authorization port 1812 and accouting port 1813
If your firewall and freeradius' clients.conf are correctly configured, yes :)
- if my wifi router is not able to be configured for accounting my network is not able to do accounting because station(s) cannot contact 1813.
That's correct - at least, you won't be able to do RADIUS accounting with your wifi router. Depending on your network's topology and what other equipment you may have you may be able to use another method to provide accounting. Chillispot (http://www.chillispot.org/) might do what you want. You might even be able to use the iptables byte counters on your Linux server and route traffic through it if you have no other options. -- James Wakefield, Unix Administrator, Information Technology Services Division Deakin University, Geelong, Victoria 3217 Australia. Phone: 03 5227 8690 International: +61 3 5227 8690 Fax: 03 5227 8866 International: +61 3 5227 8866 E-mail: james.wakefield@deakin.edu.au Website: http://www.deakin.edu.au
On 11/12/06, James Wakefield <jamesw@deakin.edu.au> wrote:
- if my wifi router is not able to be configured for accounting my network is not able to do accounting because station(s) cannot contact 1813.
That's correct - at least, you won't be able to do RADIUS accounting with your wifi router. Depending on your network's topology and what other equipment you may have you may be able to use another method to provide accounting. Chillispot (http://www.chillispot.org/) might do what you want. You might even be able to use the iptables byte counters on your Linux server and route traffic through it if you have no other options.
Just a little addition here. Chillispot indeed does that, but if you want an all in one solution to replace your wifi router, M0n0wall is worth to take a look at. http://m0n0.ch/wall/ I use it in hotspot setups with freeradius and it works flawlessly. Sincerely, Yves
On Sunday 12 November 2006 05:04, YvesDM wrote:
On 11/12/06, James Wakefield <jamesw@deakin.edu.au> wrote:
- if my wifi router is not able to be configured for accounting my
network is
not able to do accounting because station(s) cannot contact 1813.
That's correct - at least, you won't be able to do RADIUS accounting with your wifi router. Depending on your network's topology and what other equipment you may have you may be able to use another method to provide accounting. Chillispot (http://www.chillispot.org/) might do what you want. You might even be able to use the iptables byte counters on your Linux server and route traffic through it if you have no other options.
Just a little addition here. Chillispot indeed does that, but if you want an all in one solution to replace your wifi router, M0n0wall is worth to take a look at. http://m0n0.ch/wall/ I use it in hotspot setups with freeradius and it works flawlessly.
Sincerely, Yves
Gentlemen, thanks for your answers. Chillispot indeed looks to fulfill what I'm looking for. Bye, Bruno -- Register Linux User 353844 http://counter.li.org/ --
participants (3)
-
Bruno Costacurta -
James Wakefield -
YvesDM