Freeradius 3.0.9 COA Disconnect Configuration
Hi Guys, I have configured COA and have no problem on receiving and sending the COA package: Command: linux-8cwx:/usr/local/etc/raddb # cat coa-test.txt | radclient -x 192.168.56.101:3799 disconnect 'testing123' Sent Disconnect-Request Id 248 from 0.0.0.0:38327 to 192.168.56.101:3799 length 48 Acct-Session-Id = "00000580" User-Name = "root" NAS-IP-Address = 127.0.0.1 NAS-Port = 511 Received Disconnect-ACK Id 248 from 192.168.56.101:3799 to 0.0.0.0:0 length 20 Log: (13) Received Disconnect-Request Id 248 from 192.168.56.101:38327 to 192.168.56.101:3799 length 48 (13) Acct-Session-Id = "00000580" (13) User-Name = "root" (13) NAS-IP-Address = 127.0.0.1 (13) NAS-Port = 511 (13) # Executing section recv-coa from file /usr/local/etc/raddb/sites-enabled/coa (13) recv-coa { (13) [suffix] = noop (13) [ok] = ok (13) } # recv-coa = ok (13) # Executing section send-coa from file /usr/local/etc/raddb/sites-enabled/coa (13) send-coa { (13) [ok] = ok (13) } # send-coa = ok (13) Sent Disconnect-ACK Id 248 from 192.168.56.101:3799 to 192.168.56.101:38327 length 0 (13) Finished request (13) <done>: Cleaning up request packet ID 248 with timestamp +628 Ready to process requests Should I expect to see the root user with Session-ID 580 get disconnected? And to to trigger this disconnect automatically? BR Joaquin This email is confidential and may be subject to privilege. If you are not the intended recipient, please do not copy or disclose its content but contact the sender immediately upon receipt.
On Oct 3, 2015, at 7:08 PM, Joaquin Alzola <Joaquin.Alzola@lebara.com> wrote:
I have configured COA and have no problem on receiving and sending the COA package:
What are you trying to do? That information is useful, too.
(13) Received Disconnect-Request Id 248 from 192.168.56.101:38327 to 192.168.56.101:3799 length 48
You're sending the CoA packet to the RADIUS server. Not the NAS. Why?
Should I expect to see the root user with Session-ID 580 get disconnected?
No.
And to to trigger this disconnect automatically?
No. Sending the CoA packet to the RADIUS server just means the RADIUS server receives it. The server doesn't *do* anything with the CoA packet unless you tell it to do something. And the RADIUS server isn't the NAS. For the NAS to disconnect a user, you have to send the CoA packet to the NAS. Alan DeKok.
Thanks Alan. Though that somehow the freeRadius had a NAS module. Found an opensource NAS = PacketFence. This email is confidential and may be subject to privilege. If you are not the intended recipient, please do not copy or disclose its content but contact the sender immediately upon receipt.
On Oct 4, 2015, at 12:59 PM, Joaquin Alzola <Joaquin.Alzola@lebara.com> wrote:
Thanks Alan. Though that somehow the freeRadius had a NAS module. Found an opensource NAS = PacketFence.
I think you're not clear on what a NAS is. You're not clear on *where* the user logged in from. You're expecting the software to magically figure out what's going on. These issues need to be fixed before you will be able to solve the problem. Alan DeKok.
participants (2)
-
Alan DeKok -
Joaquin Alzola