How to control users traffic ?
Hi, Which is conventional way for checking online users traffic volume and disconnecting who reach to the limit of every user in freeradius: 1- using acct-interim packets to update output or input octets in sql and if user reach to the max of its accounting permission disconnect him/her.(Is there any patch to do this ?) 2- freeradius sends Session-Octets-Limit to the NAS and NAS can does this? 3- using billing softwares such as nibs . 4-other ways?
Eric wrote:
Which is conventional way for checking online users traffic volume and disconnecting who reach to the limit of every user in freeradius:
It's hard, and often specific to a particular NAS. Newer NASes may support disconnect packets. The upcoming 2.1.7 can send disconnect packets, which will help.
1- using acct-interim packets to update output or input octets in sql and if user reach to the max of its accounting permission disconnect him/her.(Is there any patch to do this ?)
See the NAS documentation for how to disconnect users. If it doesn't say you can disconnect users... it likely can't be done. Maybe SNMP can be used to reset the port, but that may not always be supported, either.
2- freeradius sends Session-Octets-Limit to the NAS and NAS can does this?
Does the NAS documentation say it supports that attribute?
3- using billing softwares such as nibs .
No. The billing software runs on a server, and not on the NAS. It can't control the NAS any more than FreeRADIUS can control the NAS.
4-other ways?
Buy a NAS that supports disconnect packets. Alan DeKok.
Which is conventional way for checking online users traffic volume and disconnecting who reach to the limit of every user in freeradius:
There are no standard radius attributes for this. Your NAS might have vendor specific attributes that can be used for data (sql)counters but many don't.
1- using acct-interim packets to update output or input octets in sql and if user reach to the max of its accounting permission disconnect him/her.(Is there any patch to do this ?)
Again, this will depend on NAS supporting PoD or CoA. You can make a policy that sends instructions to NAS to disconnect the user if he goes over the limit on update packet. If it doesn't, you should still be able to disconnect the user using SNMP.
2- freeradius sends Session-Octets-Limit to the NAS and NAS can does this?
If it has such VSA. You can then use standard (sql)counter. Ivan Kalik Kalik Informatika ISP
Does anyone have a example of a CoA policy they could share?? Thanks -- Andrew Paternoster GPK Computers Pty Ltd T 1300 854 223 F 1300 854 228 --------------------------------------------------------------------------- The information contained in or accompanying this e-mail is intended only for the use of the stated recipient and may contain information that is confidential and/or privileged. If the reader is not the intended recipient or the agent thereof, you are hereby notified that any dissemination, distribution or copying of this e-mail is strictly prohibited and may constitute a breach of confidence and/or privilege. If you have received this e-mail in error, please notify us immediately. Any views or opinions presented are those solely of the author and do not necessarily represent those of GPK Computers Pty Ltd.. Warning: Although the company has taken reasonable precautions to ensure no viruses are present in this e-mail, the company cannot accept responsibility for any loss or damage arising from the use of this e-mail or attachments --------------------------------------------------------------------------- Senior System Engineer-----Original Message----- From: freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org [mailto:freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Tuesday, 7 July 2009 7:12 PM To: FreeRadius users mailing list Subject: Re: How to control users traffic ?
Which is conventional way for checking online users traffic volume and disconnecting who reach to the limit of every user in freeradius:
There are no standard radius attributes for this. Your NAS might have vendor specific attributes that can be used for data (sql)counters but many don't.
1- using acct-interim packets to update output or input octets in sql and if user reach to the max of its accounting permission disconnect him/her.(Is there any patch to do this ?)
Again, this will depend on NAS supporting PoD or CoA. You can make a policy that sends instructions to NAS to disconnect the user if he goes over the limit on update packet. If it doesn't, you should still be able to disconnect the user using SNMP.
2- freeradius sends Session-Octets-Limit to the NAS and NAS can does this?
If it has such VSA. You can then use standard (sql)counter. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Does anyone have any Example policies that they can share. I'm trying to work out how to send attributes to my cisco NAS when the suers reach their traffic limit. I have looked around and cannot find how to make these policies mentioned below. Can any one point me in the right direction? Thanks -- Andrew Paternoster GPK Computers Pty Ltd T 1300 854 223 F 1300 854 228 --------------------------------------------------------------------------- The information contained in or accompanying this e-mail is intended only for the use of the stated recipient and may contain information that is confidential and/or privileged. If the reader is not the intended recipient or the agent thereof, you are hereby notified that any dissemination, distribution or copying of this e-mail is strictly prohibited and may constitute a breach of confidence and/or privilege. If you have received this e-mail in error, please notify us immediately. Any views or opinions presented are those solely of the author and do not necessarily represent those of GPK Computers Pty Ltd.. Warning: Although the company has taken reasonable precautions to ensure no viruses are present in this e-mail, the company cannot accept responsibility for any loss or damage arising from the use of this e-mail or attachments --------------------------------------------------------------------------- Senior System Engineer-----Original Message----- From: freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org [mailto:freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Tuesday, 7 July 2009 7:12 PM To: FreeRadius users mailing list Subject: Re: How to control users traffic ?
Which is conventional way for checking online users traffic volume and disconnecting who reach to the limit of every user in freeradius:
There are no standard radius attributes for this. Your NAS might have vendor specific attributes that can be used for data (sql)counters but many don't.
1- using acct-interim packets to update output or input octets in sql and if user reach to the max of its accounting permission disconnect him/her.(Is there any patch to do this ?)
Again, this will depend on NAS supporting PoD or CoA. You can make a policy that sends instructions to NAS to disconnect the user if he goes over the limit on update packet. If it doesn't, you should still be able to disconnect the user using SNMP.
2- freeradius sends Session-Octets-Limit to the NAS and NAS can does this?
If it has such VSA. You can then use standard (sql)counter. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Have you tried using WISPr attributes to control bandwidth. These are set in the Radius database server. 2009/8/18 Andrew Paternoster <andrew@gpk.net.au>:
Does anyone have any Example policies that they can share. I'm trying to work out how to send attributes to my cisco NAS when the suers reach their traffic limit.
I have looked around and cannot find how to make these policies mentioned below.
Can any one point me in the right direction?
Thanks
-- Andrew Paternoster GPK Computers Pty Ltd T 1300 854 223 F 1300 854 228 --------------------------------------------------------------------------- The information contained in or accompanying this e-mail is intended only for the use of the stated recipient and may contain information that is confidential and/or privileged. If the reader is not the intended recipient or the agent thereof, you are hereby notified that any dissemination, distribution or copying of this e-mail is strictly prohibited and may constitute a breach of confidence and/or privilege. If you have received this e-mail in error, please notify us immediately. Any views or opinions presented are those solely of the author and do not necessarily represent those of GPK Computers Pty Ltd.. Warning: Although the company has taken reasonable precautions to ensure no viruses are present in this e-mail, the company cannot accept responsibility for any loss or damage arising from the use of this e-mail or attachments --------------------------------------------------------------------------- Senior System Engineer-----Original Message----- From: freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org [mailto:freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Tuesday, 7 July 2009 7:12 PM To: FreeRadius users mailing list Subject: Re: How to control users traffic ?
Which is conventional way for checking online users traffic volume and disconnecting who reach to the limit of every user in freeradius:
There are no standard radius attributes for this. Your NAS might have vendor specific attributes that can be used for data (sql)counters but many don't.
1- using acct-interim packets to update output or input octets in sql and if user reach to the max of its accounting permission disconnect him/her.(Is there any patch to do this ?)
Again, this will depend on NAS supporting PoD or CoA. You can make a policy that sends instructions to NAS to disconnect the user if he goes over the limit on update packet. If it doesn't, you should still be able to disconnect the user using SNMP.
2- freeradius sends Session-Octets-Limit to the NAS and NAS can does this?
If it has such VSA. You can then use standard (sql)counter.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Devinder
I was trying to dynamically limit the customers speed when they hit their download quota. I'm doing this for DSL users connected to a Cisco NAS. Aren't the WISPr only for wireless users? -- Andrew Paternoster GPK Computers Pty Ltd T 1300 854 223 F 1300 854 228 Senior System Engineer-----Original Message----- From: freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org [mailto:freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org] On Behalf Of Devinder Singh Sent: Tuesday, 18 August 2009 5:16 PM To: FreeRadius users mailing list Subject: Re: How to control users traffic ? Hi Have you tried using WISPr attributes to control bandwidth. These are set in the Radius database server. 2009/8/18 Andrew Paternoster <andrew@gpk.net.au>:
Does anyone have any Example policies that they can share. I'm trying to work out how to send attributes to my cisco NAS when the suers reach their traffic limit.
I have looked around and cannot find how to make these policies mentioned below.
Can any one point me in the right direction?
Thanks
-- Andrew Paternoster GPK Computers Pty Ltd T 1300 854 223 F 1300 854 228 --------------------------------------------------------------------------- The information contained in or accompanying this e-mail is intended only for the use of the stated recipient and may contain information that is confidential and/or privileged. If the reader is not the intended recipient or the agent thereof, you are hereby notified that any dissemination, distribution or copying of this e-mail is strictly prohibited and may constitute a breach of confidence and/or privilege. If you have received this e-mail in error, please notify us immediately. Any views or opinions presented are those solely of the author and do not necessarily represent those of GPK Computers Pty Ltd.. Warning: Although the company has taken reasonable precautions to ensure no viruses are present in this e-mail, the company cannot accept responsibility for any loss or damage arising from the use of this e-mail or attachments --------------------------------------------------------------------------- Senior System Engineer-----Original Message----- From: freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org [mailto:freeradius-users-bounces+andrew=gpk.net.au@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Tuesday, 7 July 2009 7:12 PM To: FreeRadius users mailing list Subject: Re: How to control users traffic ?
Which is conventional way for checking online users traffic volume and disconnecting who reach to the limit of every user in freeradius:
There are no standard radius attributes for this. Your NAS might have vendor specific attributes that can be used for data (sql)counters but many don't.
1- using acct-interim packets to update output or input octets in sql and if user reach to the max of its accounting permission disconnect him/her.(Is there any patch to do this ?)
Again, this will depend on NAS supporting PoD or CoA. You can make a policy that sends instructions to NAS to disconnect the user if he goes over the limit on update packet. If it doesn't, you should still be able to disconnect the user using SNMP.
2- freeradius sends Session-Octets-Limit to the NAS and NAS can does this?
If it has such VSA. You can then use standard (sql)counter.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Devinder - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Andrew Paternoster wrote:
Does anyone have any Example policies that they can share.
The NAS documentation describes how to create such policies. It is specific to *each* NAS.
I'm trying to work out how to send attributes to my cisco NAS when the suers reach their traffic limit.
See your NAS documentation for how to do that.
I have looked around and cannot find how to make these policies mentioned below.
Can any one point me in the right direction?
See your NAS documentation. Alan DeKok.
The NAS server is poptop vpn server. It seems that pppd can support Session-Octets-Limit. How can freeradius send Session-Octets-Limit instead of Session-Timeout in auth-reply? On Tue, Jul 7, 2009 at 12:23 PM, Eric <bbahar3@gmail.com> wrote:
Hi, Which is conventional way for checking online users traffic volume and disconnecting who reach to the limit of every user in freeradius: 1- using acct-interim packets to update output or input octets in sql and if user reach to the max of its accounting permission disconnect him/her.(Is there any patch to do this ?) 2- freeradius sends Session-Octets-Limit to the NAS and NAS can does this? 3- using billing softwares such as nibs . 4-other ways?
On Sat, 2009-07-11 at 12:29 +0430, Eric wrote:
The NAS server is poptop vpn server. It seems that pppd can support Session-Octets-Limit. How can freeradius send Session-Octets-Limit instead of Session-Timeout in auth-reply?
On Tue, Jul 7, 2009 at 12:23 PM, Eric <bbahar3@gmail.com> wrote: Hi, Which is conventional way for checking online users traffic volume and disconnecting who reach to the limit of every user in freeradius: 1- using acct-interim packets to update output or input octets in sql and if user reach to the max of its accounting permission disconnect him/her.(Is there any patch to do this ?)
I do this. Whenever an interim accounting packet comes in - I also set an extra field (new_data=1) on that row of data.
From 'cron' (every 10 mins) - I run a script looking for accounting packets with that flag (new_data==1) set - and update those customers records accordingly - clearing the (new_data=0) flag. If a customer is over their data limit - I send a PoD (Packet of Disconnect. Next time they try and validate - I restrict them accordingly.
2- freeradius sends Session-Octets-Limit to the NAS and NAS can does this? 3- using billing softwares such as nibs . 4-other ways?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- . . ___. .__ Posix Systems - Sth Africa. e.164 VOIP ready /| /| / /__ mje@posix.co.za - Mark J Elkins, Cisco CCIE / |/ |ARK \_/ /__ LKINS Tel: +27 12 807 0590 Cell: +27 82 601 0496
what does Session-Octets-Limit exactly do? How it is related to counters? I thought freeradius sends a value(is defined in DEFAULT) to the NAS and NAS limits users traffic to this value in each session.
The NAS server is poptop vpn server. It seems that pppd can support Session-Octets-Limit. How can freeradius send Session-Octets-Limit instead of Session-Timeout in auth-reply?
Use (sql)counter. Ivan Kalik Kalik Informatika ISP
what does Session-Octets-Limit exactly do?
I have no idea. It's an attribute *you* wanted to use. As a guess, it limits number of octets for the session.
How it is related to counters?
You would configure it as a reply-name.
I thought freeradius sends a value(is defined in DEFAULT) to the NAS and NAS limits users traffic to this value in each session.
That's without counters. If you use counter, you place check-name attribute-value pair in users (or as DEFAULT) entry. On connection attempt freeradius will count usage so far, deduct it from the limit (check-name attribute value) and pace the reminder as a value for reply-name attribute. Ivan Kalik Kalik Informatika ISP
I set reply-name = Session-Octets-Limit in sqlcounter but freeradius sends Seesion-Timeout in reply with value equal to the deduct of octets used until now from check-name = Max-Input-Octets. How should change the session-timeout to Session-Octets-Limit in auth-reply? what does Session-Octets-Limit exactly do? I have no idea. It's an attribute *you* wanted to use. As a guess, it limits number of octets for the session.
How it is related to counters?
You would configure it as a reply-name.
I thought freeradius sends a value(is defined in DEFAULT) to the NAS and NAS limits users traffic to this value in each session.
That's without counters. If you use counter, you place check-name attribute-value pair in users (or as DEFAULT) entry. On connection attempt freeradius will count usage so far, deduct it from the limit (check-name attribute value) and pace the reminder as a value for reply-name attribute. Ivan Kalik Kalik Informatika ISP
I set reply-name = Session-Octets-Limit in sqlcounter but freeradius sends Seesion-Timeout in reply with value equal to the deduct of octets used until now from check-name = Max-Input-Octets. How should change the session-timeout to Session-Octets-Limit in auth-reply?
That shouldn't happen. What freeradius version? Post the debug from server startup and request processiong. Ivan Kalik Kalik Informatika ISP
participants (6)
-
Alan DeKok -
Andrew Paternoster -
Devinder Singh -
Eric -
Ivan Kalik -
Mark Elkins