Can freeRADIUS originate CoA Acks?
Alan DeKok
aland at deployingradius.com
Fri Apr 11 23:29:47 CEST 2014
Chavez, Andres ((HP Networking - Roseville)) wrote:
> I know freeRADIUS can originate CoA packets. I configured this and is
> working perfectly. However, I am in need of freeRADIUS (acting as
> proxy) to originate CoA Acks when it receives a CoA packet destined for
> the NAS.
OK... Proxies don't originate anything. They proxy a reply, if it exists.
> 1. freeRADIUS intercepts Accept packets and modifies before sending
> to NAS.
>
> 2. freeRADIUS intercepts CoA packets and sends SOAP commands to NAS
> to perform actions in the CoA attributes.
>
> 3. freeRADIUS forwards CoA packet to NAS (which NAS ignores.)
That's the issue. Don't forward the CoA packet to the NAS. Instead,
have FreeRADIUS just send a CoA-ACK.
> What I need is a way to have freeRADIUS (acting as proxy) to send a CoA
> Ack when it intercepts the CoA packet (preferably after the SOAP
> commands are executed, but not required.)
You configure it to *not* proxy the COA packet to the NAS. This
should be trivial to do in "unlang".
Alan DeKok.
More information about the Freeradius-Users
mailing list