Why dont you have the "seession-idel" attribute set, so that when no bytes are transfered for a certain period of time the connection is terminated? Tas. Peter Nixon wrote:

On Tue 16 Jan 2007 02:22, apolyxrono wrote:

...

Hi list ,

I have set up a wlan using : freeradius-1.1.4 (peap-eap/mschapv2-authentication), AccessPoint-3Com7250 and windows xp wireless users. My AP has the option for accounting and i have set it on. I logged the accounting info in the radius database in the radacct table to be more specific. When a wireless user connected to the wlan i am executing the following sql query:

select UserName , NASIPAddress , AcctStartTime , AcctStopTime , AcctSessionTime , AcctInputOctets , AcctOutputOctets from radacct ;

and the output is :

+----------+--------------+---------------------+---------------------+--- --------------+-----------------+------------------+

| UserName | NASIPAddress | AcctStartTime | AcctStopTime |

AcctSessionTime | AcctInputOctets | AcctOutputOctets | +----------+--------------+---------------------+---------------------+--- --------------+-----------------+------------------+

| sony | 10.0.0.10 | 2007-01-15 22:33:12 | 0000-00-00 00:00:00 | 41 | 718 | 164 |

+----------+--------------+---------------------+---------------------+--- --------------+-----------------+------------------+

After If the user select from his wireless card software to disconnect from the specific wlan and make the same query to the database i can see that the AcctStopTime have a specific value and accounting for this user has stopped. However if the user does not use his/her wireless software to disconnect from the wlan and tun-off the wlan switcher of his/her card the accounting is continued (AcctSessionTime is counting) on freeradius but the AcctInputOctets and AcctOutputOctets stop counting. Why is that happening ? How should i know when the user is connected in the wlan and the user was just turned-off his/her switch of wlan ?

If your NAS does not tell radius that the user has disconnected RADIUS will not know....

------------------------------------------------------------------------

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- ************************************* Tas Dionisakos IT Manager St Mary’s College and Newman College The University of Melbourne T: 03 9342 1708 M: 0439 655 565 E: tas@newman.unimelb.edu.au C: (0o (||||)(||||) o0) *************************************

Polyxronopoulos Adreas wrote:

Do you think my AP doesn't say nothing to freeradius after the mac-address drop? There is nothing in the AP web-configuration which could set it on and solve the problem. If the problem is the nas there is not a solution ?

Thanks a lot for your time....

I suspect the AP isn't sending Accounting-Stop in this situation, but you can confirm that by running freeradius in debug mode (-X) and watching the screen, or running a packet sniffer such as wireshark or tcpdump. If the AP isn't sending Accounting-Stop, and there's no way you can get a better AP that does, I guess you could periodically run a script from cron to log into the AP's web interface and grab the list of MAC addresses and compare against what your accounting database thinks are open sessions... -- James Wakefield, Unix Administrator, Information Technology Services Division Deakin University, Geelong, Victoria 3217 Australia. Phone: 03 5227 8690 International: +61 3 5227 8690 Fax: 03 5227 8866 International: +61 3 5227 8866 E-mail: james.wakefield@deakin.edu.au Website: http://www.deakin.edu.au