ok thanks a lit edvin but one more question please Session-Octets-Limit := 1000 for example the "1000" = byte or kbyte or MB ? coz everything thing seems to be working i can see the attribute in the radius log and in the raddattr file and in the sql table but it is not disconnecting the user :| On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote:
shall i added it to the radclient on the nas box ?
YES ! Both server and client have to know about what attribute are you "talking about".
Regards,
Edvin
------------------------------
*From:* Mordor Networks [mailto:mordor.networks@gmail.com] *Sent:* Mittwoch, 31. Mai 2006 08:46 *To:* edvin.seferovic@kolp.at; FreeRadius users mailing list *Subject:* Re: Session-Octets-Limits
On 5/31/06, *Seferovic Edvin *<edvin.seferovic@kolp.at> wrote:
Hi Edvin
Session-Octets-Limit should only be in the reply table ( it is not a value that should be checked – right ? ).
yes youre right
If the freeradius replies the attribute – the freeradius is finished with his task. Now your RP-PPPoE server and the radiusclient should do the rest of the work. Traffic limiting is done with PPProtocol on your NAS ( your pppoe server ). Be sure that the radiusclient also has the attribute in his dictionary file. Look at the output of the ppp and pppoe ( increase the log level – or put both in debug mode ).
i added the attributes to the /usr/local/share/dictionary file shall i added it to the radclient on the nas box ?
Regards
It seems that this is not problem of freeradius anymore !
Regards,
Edvin
------------------------------
*From:* freeradius-users-bounces+edvin.seferovic= kolp.at@lists.freeradius.org [mailto:freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.org ] *On Behalf Of *Mordor Networks *Sent:* Dienstag, 30. Mai 2006 22:56 *To:* FreeRadius users mailing list *Subject:* Session-Octets-Limits
Hello users
I'm trying to add Session-Octets-Limit to limit the user bandwidth i add Session-Octets-Limit := 1000 in radcheck and radreply and i can see it in the radiusd -X and in the radattr file :
Framed-IP-Address
*70.70.70.70*
Session-Octets-Limit 825241648
Framed-Protocol PPP
Framed-IP-Netmask 255.255.255.255
Framed-MTU 1500
Session-Timeout 43200
Idle-Timeout 1200
Port-Limit 1
But it is not disconnecting the user when reach the limit , can someone help me please?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Session-Octets-Limit should be as integer or "octets" in the dictionary file. Guess what octets mean ;-) Bytes of course ! And also be aware of the limitation of an integer. Disconnection should be done by PPP which is called by rp-pppoe server. Please - look at log files of the rp-pppoe server. Set the limit to 100000 ( 100 kB ) and open a few pages. See if you get disconnected and what messages are being logged. As already said - this is out of the freeradius range ! Regards, Edvin PS: one mail to the mailing list should be enough. I get the mails from the list too, so you do NOT need to send me an extra mail ;-) _____ From: Mordor Networks [mailto:mordor.networks@gmail.com] Sent: Mittwoch, 31. Mai 2006 09:19 To: edvin.seferovic@kolp.at; FreeRadius users mailing list Subject: Re: Session-Octets-Limits ok thanks a lit edvin but one more question please Session-Octets-Limit := 1000 for example the "1000" = byte or kbyte or MB ? coz everything thing seems to be working i can see the attribute in the radius log and in the raddattr file and in the sql table but it is not disconnecting the user :| On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote: shall i added it to the radclient on the nas box ? YES ! Both server and client have to know about what attribute are you "talking about". Regards, Edvin _____ From: Mordor Networks [mailto:mordor.networks@gmail.com] Sent: Mittwoch, 31. Mai 2006 08:46 To: edvin.seferovic@kolp.at; FreeRadius users mailing list Subject: Re: Session-Octets-Limits On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote: Hi Edvin Session-Octets-Limit should only be in the reply table ( it is not a value that should be checked - right ? ). yes youre right If the freeradius replies the attribute - the freeradius is finished with his task. Now your RP-PPPoE server and the radiusclient should do the rest of the work. Traffic limiting is done with PPProtocol on your NAS ( your pppoe server ). Be sure that the radiusclient also has the attribute in his dictionary file. Look at the output of the ppp and pppoe ( increase the log level - or put both in debug mode ). i added the attributes to the /usr/local/share/dictionary file shall i added it to the radclient on the nas box ? Regards It seems that this is not problem of freeradius anymore ! Regards, Edvin _____ From: freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.org [mailto:freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.or g ] On Behalf Of Mordor Networks Sent: Dienstag, 30. Mai 2006 22:56 To: FreeRadius users mailing list Subject: Session-Octets-Limits Hello users I'm trying to add Session-Octets-Limit to limit the user bandwidth i add Session-Octets-Limit := 1000 in radcheck and radreply and i can see it in the radiusd -X and in the radattr file : Framed-IP-Address <http://70.70.70.70> 70.70.70.70 Session-Octets-Limit 825241648 Framed-Protocol PPP Framed-IP-Netmask 255.255.255.255 Framed-MTU 1500 Session-Timeout 43200 Idle-Timeout 1200 Port-Limit 1 But it is not disconnecting the user when reach the limit , can someone help me please? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote:
Session-Octets-Limit should be as integer or „octets" in the dictionary file. Guess what octets mean ;-) Bytes of course ! And also be aware of the limitation of an integer.
Sorry about the extra mail , i have this in both of dic files
ATTRIBUTE Session-Octets-Limit 227 integer ATTRIBUTE Octets-Direction 228 integer
and yes sir i know that ppp should do the disconnection but i'm affradi that i have something wrong in my dictionary files , so shall i add something else to the attributes above?
Disconnection should be done by PPP which is called by rp-pppoe server. Please – look at log files of the rp-pppoe server. Set the limit to 100000 ( 100 kB ) and open a few pages. See if you get disconnected and what messages are being logged. As already said – this is out of the freeradius range !
regards
Regards,
Edvin
PS: one mail to the mailing list should be enough. I get the mails from the list too, so you do NOT need to send me an extra mail ;-)
------------------------------
*From:* Mordor Networks [mailto:mordor.networks@gmail.com] *Sent:* Mittwoch, 31. Mai 2006 09:19
*To:* edvin.seferovic@kolp.at; FreeRadius users mailing list *Subject:* Re: Session-Octets-Limits
ok thanks a lit edvin but one more question please
Session-Octets-Limit := 1000 for example the "1000" = byte or kbyte or MB ? coz everything thing seems to be working i can see the attribute in the radius log and in the raddattr file and in the sql table but it is not disconnecting the user :|
On 5/31/06, *Seferovic Edvin* <edvin.seferovic@kolp.at> wrote:
shall i added it to the radclient on the nas box ?
YES ! Both server and client have to know about what attribute are you "talking about".
Regards,
Edvin
------------------------------
*From:* Mordor Networks [mailto:mordor.networks@gmail.com] *Sent:* Mittwoch, 31. Mai 2006 08:46 *To:* edvin.seferovic@kolp.at; FreeRadius users mailing list *Subject:* Re: Session-Octets-Limits
On 5/31/06, *Seferovic Edvin *<edvin.seferovic@kolp.at> wrote:
Hi Edvin
Session-Octets-Limit should only be in the reply table ( it is not a value that should be checked – right ? ).
yes youre right
If the freeradius replies the attribute – the freeradius is finished with his task. Now your RP-PPPoE server and the radiusclient should do the rest of the work. Traffic limiting is done with PPProtocol on your NAS ( your pppoe server ). Be sure that the radiusclient also has the attribute in his dictionary file. Look at the output of the ppp and pppoe ( increase the log level – or put both in debug mode ).
i added the attributes to the /usr/local/share/dictionary file shall i added it to the radclient on the nas box ?
Regards
It seems that this is not problem of freeradius anymore !
Regards,
Edvin
------------------------------
*From:* freeradius-users-bounces+edvin.seferovic= kolp.at@lists.freeradius.org [mailto:freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.org ] *On Behalf Of *Mordor Networks *Sent:* Dienstag, 30. Mai 2006 22:56 *To:* FreeRadius users mailing list *Subject:* Session-Octets-Limits
Hello users
I'm trying to add Session-Octets-Limit to limit the user bandwidth i add Session-Octets-Limit := 1000 in radcheck and radreply and i can see it in the radiusd -X and in the radattr file :
Framed-IP-Address
*70.70.70.70*
Session-Octets-Limit 825241648
Framed-Protocol PPP
Framed-IP-Netmask 255.255.255.255
Framed-MTU 1500
Session-Timeout 43200
Idle-Timeout 1200
Port-Limit 1
But it is not disconnecting the user when reach the limit , can someone help me please?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Those attributes are okay ! What about NAS log files ?? Regards, Edvin ________________________________________ From: freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.org [mailto:freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.or g] On Behalf Of Mordor Networks Sent: Mittwoch, 31. Mai 2006 09:47 To: FreeRadius users mailing list Subject: Re: Session-Octets-Limits On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote: Session-Octets-Limit should be as integer or "octets" in the dictionary file. Guess what octets mean ;-) Bytes of course ! And also be aware of the limitation of an integer. Sorry about the extra mail , i have this in both of dic files ATTRIBUTE Session-Octets-Limit 227 integer ATTRIBUTE Octets-Direction 228 integer and yes sir i know that ppp should do the disconnection but i'm affradi that i have something wrong in my dictionary files , so shall i add something else to the attributes above? Disconnection should be done by PPP which is called by rp-pppoe server. Please - look at log files of the rp-pppoe server. Set the limit to 100000 ( 100 kB ) and open a few pages. See if you get disconnected and what messages are being logged. As already said - this is out of the freeradius range ! regards Regards, Edvin PS: one mail to the mailing list should be enough. I get the mails from the list too, so you do NOT need to send me an extra mail ;-) ________________________________________ From: Mordor Networks [mailto:mordor.networks@gmail.com] Sent: Mittwoch, 31. Mai 2006 09:19 To: edvin.seferovic@kolp.at; FreeRadius users mailing list Subject: Re: Session-Octets-Limits ok thanks a lit edvin but one more question please Session-Octets-Limit := 1000 for example the "1000" = byte or kbyte or MB ? coz everything thing seems to be working i can see the attribute in the radius log and in the raddattr file and in the sql table but it is not disconnecting the user :| On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote: shall i added it to the radclient on the nas box ? YES ! Both server and client have to know about what attribute are you "talking about". Regards, Edvin ________________________________________ From: Mordor Networks [mailto:mordor.networks@gmail.com] Sent: Mittwoch, 31. Mai 2006 08:46 To: edvin.seferovic@kolp.at; FreeRadius users mailing list Subject: Re: Session-Octets-Limits On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote: Hi Edvin Session-Octets-Limit should only be in the reply table ( it is not a value that should be checked - right ? ). yes youre right If the freeradius replies the attribute - the freeradius is finished with his task. Now your RP-PPPoE server and the radiusclient should do the rest of the work. Traffic limiting is done with PPProtocol on your NAS ( your pppoe server ). Be sure that the radiusclient also has the attribute in his dictionary file. Look at the output of the ppp and pppoe ( increase the log level - or put both in debug mode ). i added the attributes to the /usr/local/share/dictionary file shall i added it to the radclient on the nas box ? Regards It seems that this is not problem of freeradius anymore ! Regards, Edvin ________________________________________ From: freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.org [mailto:freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.or g ] On Behalf Of Mordor Networks Sent: Dienstag, 30. Mai 2006 22:56 To: FreeRadius users mailing list Subject: Session-Octets-Limits Hello users I'm trying to add Session-Octets-Limit to limit the user bandwidth i add Session-Octets-Limit := 1000 in radcheck and radreply and i can see it in the radiusd -X and in the radattr file : Framed-IP-Address 70.70.70.70 Session-Octets-Limit 825241648 Framed-Protocol PPP Framed-IP-Netmask 255.255.255.255 Framed-MTU 1500 Session-Timeout 43200 Idle-Timeout 1200 Port-Limit 1 But it is not disconnecting the user when reach the limit , can someone help me please? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Its working and the user disconnect when reachs the limit but now if the user disconnect and reconnect it will all start over is there a way to lock the account?
so that the user wont be able to connect again? ________________________________________
From: freeradius-users-bounces+edvin.seferovic= kolp.at@lists.freeradius.org [mailto: freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.or g] On Behalf Of Mordor Networks Sent: Mittwoch, 31. Mai 2006 09:47 To: FreeRadius users mailing list Subject: Re: Session-Octets-Limits
On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote: Session-Octets-Limit should be as integer or "octets" in the dictionary file. Guess what octets mean ;-) Bytes of course ! And also be aware of the limitation of an integer. Sorry about the extra mail , i have this in both of dic files
ATTRIBUTE Session-Octets-Limit 227 integer ATTRIBUTE Octets-Direction 228 integer
and yes sir i know that ppp should do the disconnection but i'm affradi that i have something wrong in my dictionary files , so shall i add something else to the attributes above? Disconnection should be done by PPP which is called by rp-pppoe server. Please - look at log files of the rp-pppoe server. Set the limit to 100000 ( 100 kB ) and open a few pages. See if you get disconnected and what messages are being logged. As already said - this is out of the freeradius range ! regards Regards, Edvin
PS: one mail to the mailing list should be enough. I get the mails from the list too, so you do NOT need to send me an extra mail ;-)
________________________________________ From: Mordor Networks [mailto:mordor.networks@gmail.com] Sent: Mittwoch, 31. Mai 2006 09:19
To: edvin.seferovic@kolp.at; FreeRadius users mailing list Subject: Re: Session-Octets-Limits
ok thanks a lit edvin but one more question please
Session-Octets-Limit := 1000 for example the "1000" = byte or kbyte or MB ? coz everything thing seems to be working i can see the attribute in the radius log and in the raddattr file and in the sql table but it is not disconnecting the user :| On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote: shall i added it to the radclient on the nas box ?
YES ! Both server and client have to know about what attribute are you "talking about".
Regards,
Edvin
________________________________________ From: Mordor Networks [mailto:mordor.networks@gmail.com] Sent: Mittwoch, 31. Mai 2006 08:46 To: edvin.seferovic@kolp.at; FreeRadius users mailing list Subject: Re: Session-Octets-Limits
On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote:
Hi Edvin Session-Octets-Limit should only be in the reply table ( it is not a value that should be checked - right ? ). yes youre right If the freeradius replies the attribute - the freeradius is finished with his task. Now your RP-PPPoE server and the radiusclient should do the rest of the work. Traffic limiting is done with PPProtocol on your NAS ( your pppoe server ). Be sure that the radiusclient also has the attribute in his dictionary file. Look at the output of the ppp and pppoe ( increase the log level - or put both in debug mode ). i added the attributes to the /usr/local/share/dictionary file shall i added it to the radclient on the nas box ?
Regards
It seems that this is not problem of freeradius anymore !
Regards,
Edvin
________________________________________ From: freeradius-users-bounces+edvin.seferovic= kolp.at@lists.freeradius.org [mailto: freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.or g ] On Behalf Of Mordor Networks Sent: Dienstag, 30. Mai 2006 22:56 To: FreeRadius users mailing list Subject: Session-Octets-Limits
Hello users
I'm trying to add Session-Octets-Limit to limit the user bandwidth i add Session-Octets-Limit := 1000 in radcheck and radreply and i can see it in the radiusd -X and in the radattr file : Framed-IP-Address
70.70.70.70
Session-Octets-Limit 825241648
Framed-Protocol PPP
Framed-IP-Netmask 255.255.255.255
Framed-MTU 1500
Session-Timeout 43200
Idle-Timeout 1200
Port-Limit 1
But it is not disconnecting the user when reach the limit , can someone help me please?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Its working and the user disconnect when reachs the limit but now if the user disconnect and reconnect it will all start over is there a way to lock the account?
so that the user wont be able to connect again?
YES, by using sqlcounter module ! This module should count the traffic usage before user is authorized to connect. Regards, Edvin
Do i have to patch the sqlcounter module so that it can be used for counting traffic? I have the default sqlcounter in my radius.conf sqlcounter Dailycounter and sqlcounter monthlycounter/ On 5/31/06, Seferovic Edvin <edvin.seferovic@kolp.at> wrote:
Its working and the user disconnect when reachs the limit but now if the user disconnect and reconnect it will all start over is there a way to lock the account?
so that the user wont be able to connect again?
YES, by using sqlcounter module ! This module should count the traffic usage before user is authorized to connect.
Regards, Edvin
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Mordor Networks -
Seferovic Edvin