Can freeRADIUS originate CoA Acks?

Alan DeKok aland at deployingradius.com
Fri Apr 11 23:29:47 CEST 2014


Chavez, Andres ((HP Networking - Roseville)) wrote:
> I know freeRADIUS can originate CoA packets.  I configured this and is
> working perfectly.  However, I am in need of freeRADIUS (acting as
> proxy) to originate CoA Acks when it receives a CoA packet destined for
> the NAS.

  OK... Proxies don't originate anything.  They proxy a reply, if it exists.

> 1.      freeRADIUS intercepts Accept packets and modifies before sending
> to NAS.
> 
> 2.      freeRADIUS intercepts CoA packets and sends SOAP commands to NAS
> to perform actions in the CoA attributes.
> 
> 3.      freeRADIUS forwards CoA packet to NAS (which NAS ignores.)

  That's the issue.  Don't forward the CoA packet to the NAS.  Instead,
have FreeRADIUS just send a CoA-ACK.

> What I need is a way to have freeRADIUS (acting as proxy) to send a CoA
> Ack when it intercepts the CoA packet (preferably after the SOAP
> commands are executed, but not required.)

  You configure it to *not* proxy the COA packet to the NAS.  This
should be trivial to do in "unlang".

  Alan DeKok.


More information about the Freeradius-Users mailing list