Monitoring Tool for Freeradius
Arran Cudbard-Bell
A.Cudbard-Bell at sussex.ac.uk
Fri Feb 1 15:00:01 CET 2008
Marinko Tarlac wrote:
> We have a wireless network and sometimes when link between two points
> is down, radius updates are not received and session stays opened. I
> solved this problem with additional field in radacct table and I place
> time stamp inside that field on every update. If there is no update in
> 5 minutes (i can define interval), script closes connection.
Not every NAS supports sending periodic accounting updates.
> This will solve your problems with opened connections. But what if
> user still stays connected after link is back and his session is closed?
> Answer: Traffic won't be recorded because user don't have opened
> connection (session with AcctStopTime = '0000-00-00 00:00:00')
>
Or you update your SQL queries to reopen the session when additional
data is collected ...
The only reliable solution is to Poll the NAS everything else is just
guessing.
>
>
>
> On Feb 1, 2008 1:53 PM, Arran Cudbard-Bell
> <A.Cudbard-Bell at sussex.ac.uk <mailto:A.Cudbard-Bell at sussex.ac.uk>> wrote:
>
> Devinder Singh wrote:
> >
> > Hi
> >
> > I had use daloradius and you can monitor how many users are
> online etc
> It's guessing from the number of 'open' sessions in your accounting
> database (those without a stop time), if something goes wibble on the
> NAS or infrastructure between the NAS and server, and a user
> disconnects
> in that period (and maximum retries are hit, all hosts exhausted etc)
> then the Accounting Stop packet will be discarded by the switch
> and that
> session will never be recorded as closing.
>
> Any good administration tool should include tools to query the
> standard
> dot1x MIB and to periodically go round and check all 'open'
> sessions by
> polling the NAS's and ammend the information in the database
> appropriately. Isn't there even a tool / script included in the FR
> distro that does this ?
> >
> > On 01/02/2008, *Julian Stöver* <julian_st at gmx.de
> <mailto:julian_st at gmx.de>
> > <mailto:julian_st at gmx.de <mailto:julian_st at gmx.de>>> wrote:
> >
> > Hello,
> > is there any monitoring tool for freeradius or another
> possibility to
> > see how many people are logged in and to do some other
> stuff? like the
> > monitoring tool for openvpn? Would be nice if there's something
> > avaible!
> >
> > bye!
> > julian
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
> >
> >
> >
> > --
> > Devinder
> >
> ------------------------------------------------------------------------
> >
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> --
> Arran Cudbard-Bell (A.Cudbard-Bell at sussex.ac.uk
> <mailto:A.Cudbard-Bell at sussex.ac.uk>)
> Authentication, Authorisation and Accounting Officer
> Infrastructure Services | ENG1 E1-1-08
> University Of Sussex, Brighton
> EXT:01273 873900 | INT: 3900
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> ------------------------------------------------------------------------
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list