Dear list. I'm using freeradius 2.2.5 on debian for authorization & authentication to a WiFi-network. The NAS is a TP-Link TL-WR841ND, which is a router including NAT (without DSL). I'm trying setting up accounting for automatic session-timeout after the account expired. For this purpose it seems I need `accounting', which is activated for performing accounting entries in the mysql-radacct table. The configuration looks to me okay. Nevertheless the radacct table stays empty. No entries are made. After reading the documentation it looks to me, that the client (in this case the WiFi-router) must support accounting and send accounting packages to make this feature work or is accounting available in every correctly implemented radius-WiFi router? Must it the simply be activated and on which keyword must I look for? I Many thanks in advance Jens
On 28-04-16 10:39, dump@gmx.info wrote:
... Nevertheless the radacct table stays empty. No entries are made. After reading the documentation it looks to me, that the client (in this case the WiFi-router) must support accounting and send accounting packages to make this feature work or is accounting available in every correctly implemented radius-WiFi router?
The NAS must support it to make accounting work. Most NASses do, but of course there are exceptions. I might also be a misconfiguration on the RADIUS side, you can use TCPDump on port 1813 to see if any accounting data is received on the FreeRADIUS server.
Must it the simply be activated and on which keyword must I look for? I Many thanks in advance
My general experience with TP-Link is that they are most suitable as paperweights or frisbees. There may be exceptions, but I wouldn't be surprised if it simply is not supported on the NAS. -- Herwin Weststrate
Hello Herwin and Mikael, many thanks for your answers. On 28.04.2016 10:46, Herwin Weststrate wrote:
On 28-04-16 10:39, dump@gmx.info wrote:
The NAS must support it to make accounting work. Most NASses do, but of course there are exceptions. I might also be a misconfiguration on the RADIUS side, you can use TCPDump on port 1813 to see if any accounting data is received on the FreeRADIUS server.
My general experience with TP-Link is that they are most suitable as paperweights or frisbees. There may be exceptions, but I wouldn't be surprised if it simply is not supported on the NAS.
Your expectation was right, the TP's firmware of 841 doesn't support accounting. I followed Mikael's links and changed the firmware to OpenWRT+extension to hostapd for WPA-Enterprise. Now accounting works as expected. Many thanks and best regards Jens
Hi Jens, On 2016-04-28 10:39, dump@gmx.info wrote:
Dear list.
I'm using freeradius 2.2.5 on debian for authorization & authentication to a WiFi-network. The NAS is a TP-Link TL-WR841ND, which is a router including NAT (without DSL).
If TP-Link original firmware does not support accounting you may want to try OpenWrt instead. OpenWrt on TL-WR841ND: https://wiki.openwrt.org/toh/tp-link/tl-wr841nd OpenWrt and 802.1x: https://wiki.openwrt.org/doc/howto/wireless.security.8021x OpenWrt supports accounting: https://wiki.openwrt.org/doc/uci/wireless#wpa_enterprise_access_point HTH, Mikael
participants (3)
-
dump＠gmx.info -
Herwin Weststrate -
Микаел Бак