Hello all, I am trying to solve a problem about Simultaneous-Use, not in the code because its working, but inside my network layout. I have two different NAS the can authenticate the same client for PPPoE, something like this: [ internet ] ---+ NAS01 +--- [ client ] ----| NAS02 |---- So the client can be connected to any of those 2 NAS for different reasons and when I have a problem, like a power surge, in one of the NAS I got the connection stopped because the NAS that turned down is not sending any accounting packets to the radius. Its ok when I use only one NAS but I am using 2 for backup in cases like a power surge or a hard shutdown of the machine. If the simultaneous-use work so the client cannot connect to NAS02 (assuming that NAS01 has been turned down) until NAS01 is powered on and send account-stop to the radius. So, my question is: how can I use Simultaneous-Use in this scenario? Should I make a script that test if the NAS is online every 10 seconds and if not list all clients connect and stop that connections? Should this work? Is there anyone with the same scenario that can share the solution for the problem? -- Descrição: 20110500 - EMAIL-SIGN - CAPADescrição: 20110500 - EMAIL-SIGN - nata
So, my question is: how can I use Simultaneous-Use in this scenario? Should I make a script that test if the NAS is online every 10 seconds and if not list all clients connect and stop that connections? Should this work? Is there anyone with the same scenario that can share the solution for the problem?
--, Yes, Yes, -- You can use radclient to send fake accounting stop packets to clear up the stale sessions. Arran Cudbard-Bell a.cudbardb@freeradius.org Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !
We discuss at least once per week about stalled sessions... Search before you ask... On 10/10/2011 10:49 PM, Arran Cudbard-Bell wrote:
So, my question is: how can I use Simultaneous-Use in this scenario? Should I make a script that test if the NAS is online every 10 seconds and if not list all clients connect and stop that connections? Should this work? Is there anyone with the same scenario that can share the solution for the problem?
--, Yes, Yes, --
You can use radclient to send fake accounting stop packets to clear up the stale sessions.
Arran Cudbard-Bell a.cudbardb@freeradius.org <mailto:a.cudbardb@freeradius.org>
Betelwiki, Betelwiki, Betelwiki....http://wiki.freeradius.org/ !
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Marinko, I didn't know how to ask for "stalled sessions" and I searched for Sim-Use and found nothing useful... So, if you do not want to help, do not answer... --
-----Mensagem original----- De: freeradius-users-bounces+listas.nata=cnett.com.br@lists.freeradius.org [mailto:freeradius-users- bounces+listas.nata=cnett.com.br@lists.freeradius.org] Em nome de Marinko Tarlac Enviada em: segunda-feira, 10 de outubro de 2011 17:59 Para: FreeRadius users mailing list Assunto: Re: Trying to solve a Simultaneous-Use problem
We discuss at least once per week about stalled sessions... Search before you ask...
On 10/10/2011 10:49 PM, Arran Cudbard-Bell wrote:
So, my question is: how can I use Simultaneous-Use in this scenario? Should I make a script that test if the NAS is online every 10 seconds and if not list all clients connect and stop that connections? Should this work? Is there anyone with the same scenario that can share the solution for the problem?
--, Yes, Yes, --
You can use radclient to send fake accounting stop packets to clear up the stale sessions.
Arran Cudbard-Bell a.cudbardb@freeradius.org <mailto:a.cudbardb@freeradius.org>
Betelwiki, Betelwiki, Betelwiki....http://wiki.freeradius.org/ !
- List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Arran, Thanks for your answer. So to test the NAS what should I use? A ping packet in a shell script? -- Descrição: 20110500 - EMAIL-SIGN - CAPADescrição: 20110500 - EMAIL-SIGN - nata De: freeradius-users-bounces+listas.nata=cnett.com.br@lists.freeradius.org [mailto:freeradius-users-bounces+listas.nata=cnett.com.br@lists.freeradius.o rg] Em nome de Arran Cudbard-Bell Enviada em: segunda-feira, 10 de outubro de 2011 17:49 Para: FreeRadius users mailing list Assunto: Re: Trying to solve a Simultaneous-Use problem So, my question is: how can I use Simultaneous-Use in this scenario? Should I make a script that test if the NAS is online every 10 seconds and if not list all clients connect and stop that connections? Should this work? Is there anyone with the same scenario that can share the solution for the problem? --, Yes, Yes, -- You can use radclient to send fake accounting stop packets to clear up the stale sessions. Arran Cudbard-Bell a.cudbardb@freeradius.org Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !
On 11 Oct 2011, at 13:34, Nataniel Klug wrote:
Arran,
Thanks for your answer. So to test the NAS what should I use? A ping packet in a shell script?
Yes. Or an SNMP request. Arran Cudbard-Bell a.cudbardb@freeradius.org Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !
Thank you Arran, this will help a lot -- Descrição: 20110500 - EMAIL-SIGN - CAPADescrição: 20110500 - EMAIL-SIGN - nata De: freeradius-users-bounces+listas.nata=cnett.com.br@lists.freeradius.org [mailto:freeradius-users-bounces+listas.nata=cnett.com.br@lists.freeradius.o rg] Em nome de Arran Cudbard-Bell Enviada em: terça-feira, 11 de outubro de 2011 11:55 Para: FreeRadius users mailing list Assunto: Re: RES: Trying to solve a Simultaneous-Use problem On 11 Oct 2011, at 13:34, Nataniel Klug wrote: Arran, Thanks for your answer. So to test the NAS what should I use? A ping packet in a shell script? Yes. Or an SNMP request. Arran Cudbard-Bell a.cudbardb@freeradius.org Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !
On Tue, Oct 11, 2011 at 3:44 AM, Nataniel Klug <listas.nata@cnett.com.br>wrote:
Hello all,****
** **
I am trying to solve a problem about Simultaneous-Use, not in the code because it’s working, but inside my network layout. I have two different NAS the can authenticate the same client for PPPoE, something like this:****
** **
** **
[ internet ] ---+ NAS01 +--- [ client ]****
----| NAS02 |----****
** **
So the client can be connected to any of those 2 NAS for different reasons and when I have a problem, like a power surge, in one of the NAS I got the connection stopped because the NAS that turned down is not sending any accounting packets to the radius. It’s ok when I use only one NAS but I am using 2 for backup in cases like a power surge or a hard shutdown of the machine. If the simultaneous-use work so the client cannot connect to NAS02 (assuming that NAS01 has been turned down) until NAS01 is powered on and send account-stop to the radius.****
** **
So, my question is: how can I use Simultaneous-Use in this scenario? Should I make a script that test if the NAS is online every 10 seconds and if not list all clients connect and stop that connections? Should this work? Is there anyone with the same scenario that can share the solution for the problem?****
** **
--
You mean use simultaneous-use = 1? You can use unlang. Assume NAS01 is now dead. There's a stalled session in db. When user try to login using NAS02, check for his username and fill the session to eliminate it.
Answer bellow: -- Descrição: 20110500 - EMAIL-SIGN - CAPADescrição: 20110500 - EMAIL-SIGN - nata De: freeradius-users-bounces+listas.nata=cnett.com.br@lists.freeradius.org [mailto:freeradius-users-bounces+listas.nata=cnett.com.br@lists.freeradius.o rg] Em nome de adx grave Enviada em: segunda-feira, 10 de outubro de 2011 20:37 Para: FreeRadius users mailing list Assunto: Re: Trying to solve a Simultaneous-Use problem -- You mean use simultaneous-use = 1? You can use unlang. Assume NAS01 is now dead. There's a stalled session in db. When user try to login using NAS02, check for his username and fill the session to eliminate it. [Nataniel Klug] Yes, I am using Simultaneous-Use := 1 in my configuration. I was reading about this unlang and could not understand how to use it It would be a redundant client? http://freeradius.org/radiusd/man/unlang.html http://wiki.freeradius.org/Unlang
participants (4)
-
adx grave -
Arran Cudbard-Bell -
Marinko Tarlac -
Nataniel Klug