Limit ADSL speed using radius?

stefan.paetow at diamond.ac.uk stefan.paetow at diamond.ac.uk
Tue May 21 13:15:14 CEST 2013


Hi Tom, 

For starters, you will find this link useful for a 'Telkom' dictionary that gets rid of the "Vendor-1431-Attr-1" bits. 

http://sourceforge.net/apps/trac/hotcakes/wiki/YfiTechTelkom

(Alan D, perhaps it could be added to the FR distribution if the hotcakes people let you?)

Much of the X-Ascend-* AVPs are in the dictionary.ascend.illegal dictionary, but you'll find the Ascend-Dsl-Downstream-Limit, Ascend-Dsl-Rate-Mode and Ascend-Dsl-Upstream-Limit AVPs possibly very useful (they are not in your data, but they are declared in the dictionary.ascend dictionary).

With Regards

Stefan






-----Original Message-----
From: freeradius-users-bounces+stefan.paetow=diamond.ac.uk at lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=diamond.ac.uk at lists.freeradius.org] On Behalf Of Cooper, Tom
Sent: 21 May 2013 11:34
To: FreeRadius users mailing list
Subject: Re: Limit ADSL speed using radius?

Here is what is in my logs. Your help is greatly appreciated. I also used the Configuration-Token attribute, but to no avail.

Thanks and regards.

Packets)4(Stripped-User-Name)fnbc1024(NAS-Port)1881079990(Acct-Delay-Time)0(destinationQueue)/queue/radiusCollectorQueue
May 21 12:09:44 pp-radius-01 clamd[13406]: SelfCheck: Database status OK.
May 21 12:13:32 pp-radius-01 info: 2013-05-21 12:13:32 (NAS-Port-Type)Virtual(X-Ascend-Connect-Progress)LAN-Session-Up(Acct-Session-Id)7/0/0/31.182_4A6BD20F(Proxy-State)0x
3438(Service-Type)Framed-User(Acct-Unique-Session-Id)5c481685abb41f1f(X-Ascend-Session-Svr-Key)8BA5D87B(Acct-Authentic)RADIUS(Acct-Status-Type)Start(Connect-Info)AutoShape
dVC(Realm)pp.fnbconnect.co.za(NAS-IP-Address)196.43.27.25(NAS-Port-Id)7/0/0/31.182(Vendor-1431-Attr-1)0x44534c(SQL-User-Name)fnbc384 at pp.fnbconnect.co.za(Calling-Station-Id
)0114921873(Framed-Protocol)PPP(User-Name)fnbc384 at pp.fnbconnect.co.za(Framed-IP-Address)41.183.11.140(Class)0x495858(Stripped-User-Name)fnbc384(NAS-Port)1881079990(Acct-De
lay-Time)0(destinationQueue)/queue/radiusCollectorQueue
May 21 12:13:51 pp-radius-01 info: 2013-05-21 12:13:51
(NAS-Port-Type)Virtual(Acct-Unique-Session-Id)5f0a29916ac76901(X-Ascend-Disconnect-Cause)PPP-Rcv-Terminate-Req(Acct-
Status-Type)Stop(Connect-Info)AutoShapedVC(Acct-Output-Packets)24(Realm)pp.fnbconnect.co.za(NAS-IP-Address)196.43.27.25(X-Ascend-Pre-Input-Octets)89(Acct-Output-Octets)789
9(Vendor-1431-Attr-1)0x44534c(Acct-Terminate-Cause)User-Request(Acct-Session-Time)19(User-Name)fnbc384 at pp.fnbconnect.co.za(Class)0x495858(Framed-IP-Address)41.183.11.140(A
cct-Input-Packets)20(Acct-Input-Octets)3262(Acct-Session-Id)7/0/0/31.182_4A6BD20F(X-Ascend-Connect-Progress)LAN-Session-Up(X-Ascend-Data-Rate)384000(Service-Type)Framed-Us
er(Proxy-State)0x323036(X-Ascend-PreSession-Time)2(X-Ascend-Session-Svr-Key)8BA5D87B(Acct-Authentic)RADIUS(NAS-Port-Id)7/0/0/31.182(X-Ascend-Xmit-Rate)384000(SQL-User-Name
)fnbc384 at pp.fnbconnect.co.za(X-Ascend-Pre-Output-Octets)73(Calling-Station-Id)0114921873(Framed-Protocol)PPP(X-Ascend-Pre-Output-Packets)5(X-Ascend-Pre-Input-Packets)4(Stripped-User-Name)fnbc384(NAS-Port)1881079990(Acct-Delay-Time)0(destinationQueue)/queue/radiusCollectorQueue
May 21 12:14:31 pp-radius-01 info: 2013-05-21 12:14:31 (NAS-Port-Type)Virtual(X-Ascend-Connect-Progress)LAN-Session-Up(Acct-Session-Id)7/0/0/31.182_4A6BD89F(Proxy-State)0x323431(Service-Type)Framed-User(Acct-Unique-Session-Id)02a1009d8fa9d220(X-Ascend-Session-Svr-Key)E6470475(Acct-Authentic)RADIUS(Acct-Status-Type)Start(Connect-Info)AutoShapedVC(Realm)pp.fnbconnect.co.za(NAS-IP-Address)196.43.27.25(NAS-Port-Id)7/0/0/31.182(Vendor-1431-Attr-1)0x44534c(SQL-User-Name)fnbc512 at pp.fnbconnect.co.za(Calling-Station-Id)0114921873(Framed-Protocol)PPP(User-Name)fnbc512 at pp.fnbconnect.co.za(Framed-IP-Address)41.183.11.3(Class)0x495858(Stripped-User-Name)fnbc512(NAS-Port)1881079990(Acct-Delay-Time)0(destinationQueue)/queue/radiusCollectorQueue
May 21 12:19:44 pp-radius-01 clamd[13406]: SelfCheck: Database status OK.
May 21 12:21:18 pp-radius-01 info: 2013-05-21 12:21:17 (NAS-Port-Type)Virtual(Acct-Unique-Session-Id)ecbf13a6d7ba302d(X-Ascend-Disconnect-Cause)PPP-Rcv-Terminate-Req(Acct-Status-Type)Stop(Connect-Info)AutoShapedVC(Acct-Output-Packets)1760(Realm)pp.fnbconnect.co.za(NAS-IP-Address)196.43.27.25(X-Ascend-Pre-Input-Octets)89(Acct-Output-Octets)2166971(Vendor-1431-Attr-1)0x44534c(Acct-Terminate-Cause)User-Request(Acct-Session-Time)399(User-Name)fnbc512 at pp.fnbconnect.co.za(Class)0x495858(Framed-IP-Address)41.183.11.3(Acct-Input-Packets)1221(Acct-Input-Octets)415600(Acct-Session-Id)7/0/0/31.182_4A6BD89F(X-Ascend-Connect-Progress)LAN-Session-Up(X-Ascend-Data-Rate)384000(Service-Type)Framed-User(Proxy-State)0x323334(X-Ascend-PreSession-Time)2(X-Ascend-Session-Svr-Key)E6470475(Acct-Authentic)RADIUS(NAS-Port-Id)7/0/0/31.182(X-Ascend-Xmit-Rate)384000(SQL-User-Name)fnbc512 at pp.fnbconnect.co.za(X-Ascend-Pre-Output-Octets)73(Calling-Station-Id)0114921873(Framed-Protocol)PPP(X-Ascend-Pre-Output-Packets)5(X-Ascend-Pre-Input-Packets)4(Stripped-User!
 -Name)fnbc
512(NAS-Port)1881079990(Acct-Delay-Time)0(destinationQueue)/queue/radiusCollectorQueue
May 21 12:21:27 pp-radius-01 info: 2013-05-21 12:21:27 (NAS-Port-Type)Virtual(X-Ascend-Connect-Progress)LAN-Session-Up(Acct-Session-Id)7/0/0/31.182_4A6C09AC(Proxy-State)0x313739(Service-Type)Framed-User(Acct-Unique-Session-Id)135b39d2ab91b706(X-Ascend-Session-Svr-Key)A1746A67(Acct-Authentic)RADIUS(Acct-Status-Type)Start(Connect-Info)AutoShapedVC(Realm)pp.fnbconnect.co.za(NAS-IP-Address)196.43.27.25(NAS-Port-Id)7/0/0/31.182(Vendor-1431-Attr-1)0x44534c(SQL-User-Name)fnbc384 at pp.fnbconnect.co.za(Calling-Station-Id)0114921873(Framed-Protocol)PPP(User-Name)fnbc384 at pp.fnbconnect.co.za(Framed-IP-Address)41.183.11.140(Class)0x495858(Stripped-User-Name)fnbc384(NAS-Port)1881079990(Acct-Delay-Time)0(destinationQueue)/queue/radiusCollectorQueue


On 20/05/2013 17:14, Parham Beheshti wrote:
> Tom,
> When you receive radius packets, you can pretty much tell what it is from the headers them selves.
> Usually there are some hints in the attribute or the way they format stuff.
> Can you post one of the packets with all attributes NAS is sending you? Maybe I can guess what it is.
> But for sure mikrotik attributes will not work.
> 450k user is nothing for freeradius ...
> Regards,
> Parham
>
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
>
To read FirstRand Bank's Disclaimer for this email click on the following address or copy into your Internet browser: 
https://www.fnb.co.za/disclaimer.html 

If you are unable to access the Disclaimer, send a blank e-mail to firstrandbankdisclaimer at fnb.co.za and we will send you a copy of the Disclaimer.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail.
Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. 
Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message.
Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
 





More information about the Freeradius-Users mailing list