How to use Freeradius with traffic limit?
Hi, I'm running Freeradius 2.1+Postgresql 8.4.4+OpenVPN on Ubuntu 9.10 x86. It runs smoothly now, however, I want to know that if there is any way to limit per user's traffic, like 10G/month, and disconnect/reject their connection when the limitation has reached. It seems the the column AcctInputOctets and AcctOutputOctets is responsible for traffic calculation, how should I limit user's traffic by using these two? Thanks in advance. -- View this message in context: http://old.nabble.com/How-to-use-Freeradius-with-traffic-limit--tp28809968p2... Sent from the FreeRadius - User mailing list archive at Nabble.com.
RaidenII wrote:
I'm running Freeradius 2.1+Postgresql 8.4.4+OpenVPN on Ubuntu 9.10 x86. It runs smoothly now, however, I want to know that if there is any way to limit per user's traffic, like 10G/month, and disconnect/reject their connection when the limitation has reached.
That is usually the function of the NAS. In 2.1.9, you can configure a CoA packet in the server, *if* the NAS supports CoA. i.e. check for limit in the "accounting" section, and send a CoA packet to disconnect them if so.
It seems the the column AcctInputOctets and AcctOutputOctets is responsible for traffic calculation, how should I limit user's traffic by using these two?
See the NAS documentation for how to limit total traffic. It usually *isn't* those two attributes. Alan DeKok.
I am not using a NAS actually. It is an ordinary x86 server. Alan DeKok-2 wrote:
That is usually the function of the NAS.
In 2.1.9, you can configure a CoA packet in the server, *if* the NAS supports CoA. i.e. check for limit in the "accounting" section, and send a CoA packet to disconnect them if so.
See the NAS documentation for how to limit total traffic. It usually *isn't* those two attributes.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://old.nabble.com/How-to-use-Freeradius-with-traffic-limit--tp28809968p2... Sent from the FreeRadius - User mailing list archive at Nabble.com.
NAS is nearly analogous to RADIUS client. basically, it depends on the thing that is talking to Freeradius to say how to configure kicking someone off in real time. You could stick a script before authentication happens to check whether or not a user has exceeded his bandwidth and then either allow or dont allow them to log on again but that seems like a bad way of doing it. On Mon, Jun 7, 2010 at 4:00 PM, RaidenII <tonytzhou@gmail.com> wrote:
I am not using a NAS actually. It is an ordinary x86 server.
Alan DeKok-2 wrote:
That is usually the function of the NAS.
In 2.1.9, you can configure a CoA packet in the server, *if* the NAS supports CoA. i.e. check for limit in the "accounting" section, and send a CoA packet to disconnect them if so.
See the NAS documentation for how to limit total traffic. It usually *isn't* those two attributes.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://old.nabble.com/How-to-use-Freeradius-with-traffic-limit--tp28809968p2... Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Random quote of the week/month/whenever i get to updating it: "Quis custodiet ipsos custodes?": "who shall watch the watchers themselves?" - Juvenal
My client is pptp, and howto write such script? On Tue, Jun 8, 2010 at 7:16 AM, Paul Bartell <paul.bartell@gmail.com> wrote:
NAS is nearly analogous to RADIUS client. basically, it depends on the thing that is talking to Freeradius to say how to configure kicking someone off in real time.
You could stick a script before authentication happens to check whether or not a user has exceeded his bandwidth and then either allow or dont allow them to log on again but that seems like a bad way of doing it.
On Mon, Jun 7, 2010 at 4:00 PM, RaidenII <tonytzhou@gmail.com> wrote:
I am not using a NAS actually. It is an ordinary x86 server.
Alan DeKok-2 wrote:
That is usually the function of the NAS.
In 2.1.9, you can configure a CoA packet in the server, *if* the NAS supports CoA. i.e. check for limit in the "accounting" section, and send a CoA packet to disconnect them if so.
See the NAS documentation for how to limit total traffic. It usually *isn't* those two attributes.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context:
http://old.nabble.com/How-to-use-Freeradius-with-traffic-limit--tp28809968p2...
Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Random quote of the week/month/whenever i get to updating it: "Quis custodiet ipsos custodes?": "who shall watch the watchers themselves?" - Juvenal
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Spacelee
http://www.rhbr.com.br/modules.php?name=News&file=print&sid=40 maybe this article can help On Mon, Jun 28, 2010 at 2:44 PM, Spacelee <fjctlzy@gmail.com> wrote:
My client is pptp, and howto write such script?
On Tue, Jun 8, 2010 at 7:16 AM, Paul Bartell <paul.bartell@gmail.com>wrote:
NAS is nearly analogous to RADIUS client. basically, it depends on the thing that is talking to Freeradius to say how to configure kicking someone off in real time.
You could stick a script before authentication happens to check whether or not a user has exceeded his bandwidth and then either allow or dont allow them to log on again but that seems like a bad way of doing it.
On Mon, Jun 7, 2010 at 4:00 PM, RaidenII <tonytzhou@gmail.com> wrote:
I am not using a NAS actually. It is an ordinary x86 server.
Alan DeKok-2 wrote:
That is usually the function of the NAS.
In 2.1.9, you can configure a CoA packet in the server, *if* the NAS supports CoA. i.e. check for limit in the "accounting" section, and send a CoA packet to disconnect them if so.
See the NAS documentation for how to limit total traffic. It usually *isn't* those two attributes.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context:
http://old.nabble.com/How-to-use-Freeradius-with-traffic-limit--tp28809968p2...
Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Random quote of the week/month/whenever i get to updating it: "Quis custodiet ipsos custodes?": "who shall watch the watchers themselves?" - Juvenal
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Spacelee
-- Spacelee
can this two attribute limit the traffic ? , but what's the value could they be? Acct-Input-Packet Acct-Output -Packets On Tue, Jun 29, 2010 at 12:18 AM, Spacelee <fjctlzy@gmail.com> wrote:
http://www.rhbr.com.br/modules.php?name=News&file=print&sid=40 maybe this article can help
On Mon, Jun 28, 2010 at 2:44 PM, Spacelee <fjctlzy@gmail.com> wrote:
My client is pptp, and howto write such script?
On Tue, Jun 8, 2010 at 7:16 AM, Paul Bartell <paul.bartell@gmail.com>wrote:
NAS is nearly analogous to RADIUS client. basically, it depends on the thing that is talking to Freeradius to say how to configure kicking someone off in real time.
You could stick a script before authentication happens to check whether or not a user has exceeded his bandwidth and then either allow or dont allow them to log on again but that seems like a bad way of doing it.
On Mon, Jun 7, 2010 at 4:00 PM, RaidenII <tonytzhou@gmail.com> wrote:
I am not using a NAS actually. It is an ordinary x86 server.
Alan DeKok-2 wrote:
That is usually the function of the NAS.
In 2.1.9, you can configure a CoA packet in the server, *if* the NAS supports CoA. i.e. check for limit in the "accounting" section, and send a CoA packet to disconnect them if so.
See the NAS documentation for how to limit total traffic. It
usually
*isn't* those two attributes.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://old.nabble.com/How-to-use-Freeradius-with-traffic-limit--tp28809968p2... Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Random quote of the week/month/whenever i get to updating it: "Quis custodiet ipsos custodes?": "who shall watch the watchers themselves?" - Juvenal
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Spacelee
-- Spacelee
-- Spacelee
is there any place to tell the use of this attribute? the value format ? On Tue, Jun 29, 2010 at 2:05 PM, Alan DeKok <aland@deployingradius.com>wrote:
Spacelee wrote:
can this two attribute limit the traffic ? , but what's the value could they be?
Acct-Input-Packet Acct-Output -Packets
No.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Spacelee
what's the use of acct-input-octets and acct-output-octets On Tue, Jun 29, 2010 at 2:13 PM, Spacelee <fjctlzy@gmail.com> wrote:
is there any place to tell the use of this attribute? the value format ?
On Tue, Jun 29, 2010 at 2:05 PM, Alan DeKok <aland@deployingradius.com>wrote:
Spacelee wrote:
can this two attribute limit the traffic ? , but what's the value could they be?
Acct-Input-Packet Acct-Output -Packets
No.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Spacelee
-- Spacelee
http://www.vi1129.com/2009/06/some-mail-about-freeradius-sqlcounter-limit-th... <http://www.vi1129.com/2009/06/some-mail-about-freeradius-sqlcounter-limit-the-octets/>I have successfully use this article to limit the bandwidth, the unit is bytes. hope it's helpful On Tue, Jun 29, 2010 at 2:33 PM, Alan DeKok <aland@deployingradius.com>wrote:
Spacelee wrote:
what's the use of acct-input-octets and acct-output-octets
Read the link you posted to the list. That is the official documentation.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Spacelee
participants (4)
-
Alan DeKok -
Paul Bartell -
RaidenII -
Spacelee