Redirecting Reject Request To Webpage
Hi FreeRadius List Members, Thanks for all the support ever. i am having difficulty to understand something, i need help. i am able to configure mac authentication base on the following logic. it Works !! username="<mac address>";attribute="Auth-Type";op=":=";value="Accept" username="<mac address>";attribute="Auth-Type";op=":=";value="Reject" *Question:* Redirecting Reject Request To Webpage For example, a customer would get reject from FR due to non payment. but at this stage customer do not know, what is happening. Why internet in down. We want the request to redirected to a web page that will display the cause of disconnection. Thanks RM --
Russell Mike wrote:
*Question:* Redirecting Reject Request To Webpage
For example, a customer would get reject from FR due to non payment. but at this stage customer do not know, what is happening. Why internet in down. We want the request to redirected to a web page that will display the cause of disconnection.
RADIUS doesn't do that. It does authorization or authentication. It doesn't do firewalling or routing. Read the NAS documentation to see if it's possible. It might be, but it would involve FreeRADIUS sending an attribute to the NAS saying "do this". The NAS would then be responsible for firewalling. Remember, RADIUS carries *suggestions*. The RADIUS protocol isn't involved in routing, filtering, firewalling, web serving, etc. No user traffic ever goes through a RADIUS server, so redirecting user traffic in RADIUS is *impossible*. Alan DeKok.
Thanks Dear Alan D. Good answer with explanations. Appreciated your input. I am using CoovaChilli as NAS, i will check with them also. But i would appreciate if you could please indicate the FR attribute may can use. Thanks / Regards RM -- On Fri, Mar 8, 2013 at 2:14 PM, Alan DeKok <aland@deployingradius.com>wrote:
Russell Mike wrote:
*Question:* Redirecting Reject Request To Webpage
For example, a customer would get reject from FR due to non payment. but at this stage customer do not know, what is happening. Why internet in down. We want the request to redirected to a web page that will display the cause of disconnection.
RADIUS doesn't do that. It does authorization or authentication. It doesn't do firewalling or routing.
Read the NAS documentation to see if it's possible. It might be, but it would involve FreeRADIUS sending an attribute to the NAS saying "do this". The NAS would then be responsible for firewalling.
Remember, RADIUS carries *suggestions*. The RADIUS protocol isn't involved in routing, filtering, firewalling, web serving, etc. No user traffic ever goes through a RADIUS server, so redirecting user traffic in RADIUS is *impossible*.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 8 Mar 2013, at 11:22, Russell Mike <radius.sir@gmail.com> wrote:
Thanks Dear Alan D.
Good answer with explanations. Appreciated your input. I am using CoovaChilli as NAS, i will check with them also. But i would appreciate if you could please indicate the FR attribute may can use.
Consult the CoovaChilli docs for attributes. If we have an attribute define it's either for internal use, for an RFC, or because someone has contributed dictionaries that define it. -Arran
Thanks Dear Arran. your input is very much appreciated. I will check on NAS side. Thanks On Fri, Mar 8, 2013 at 4:30 PM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 8 Mar 2013, at 11:22, Russell Mike <radius.sir@gmail.com> wrote:
Thanks Dear Alan D.
Good answer with explanations. Appreciated your input. I am using CoovaChilli as NAS, i will check with them also. But i would appreciate if you could please indicate the FR attribute may can use.
Consult the CoovaChilli docs for attributes. If we have an attribute define it's either for internal use, for an RFC, or because someone has contributed dictionaries that define it.
-Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Arran Cudbard-Bell -
Russell Mike