Disconnect on Accounting Octet Quota

[Ali Jawad]

Thanks all for the input. I do use plain old pptpd and openvpn with
freeradius and a mysql backend. No mikrotik or chillispot

On Wed, Jul 16, 2014 at 4:01 PM, Winfield, Alister <
Alister.Winfield at bskyb.com> wrote:

>  Look at the network devices documentation there are many ways of doing
> it for example.
>
>    1. Device has quotas and it manages them for you in some way.
>    2. Device has quotas and ‘asks’ you to make a decision by RADIUS
>    (Often another authentication request with extra ‘quota’ attribute added).
>    3. Device sends interim accounting and you use CoA to stop a session
>    that goes over quota on receipt of interim accounting packet.
>    4. Something else.
>
> Basically its a function of the software+hardware you are using and not a
> function of RADIUS itself (although RADIUS may be the control mechanism).
>
>  Alister
>
>
>   From: Ali Jawad <alijawad1 at gmail.com>
> Reply-To: FreeRadius users mailing list <
> freeradius-users at lists.freeradius.org>
> Date: Wednesday, 16 July 2014 01:18
> To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
> Subject: Disconnect on Accounting Octet Quota
>
>   Hi
> I did setup a max monthly quota check to limit the amount of B/W used by a
> user. The test worked, BUT only after a user disconnects and reconnects.
> While a user is connected he can go over limit and keep doing so. I did do
> some reading and obviously the reason is that in radacct acctinputoctets
> and acctoutputoctets are only set with a stop signal.
>
>  Quote :
>
> This attribute indicates how many octets have been received from the port
> over the course of this service being provided, and can only be present in
> Accounting-Request records where the Acct-Status-Type is set to Stop.
>
>  My setup is quite simple ,I do use the below. Now the question is , is
> there another approach to overcome this limitation ? Or can I force a
> Acct-Status refresh of some sort without disconnecting users ?
>
>  sqlcounter daily-BW-counter {
>
>         counter-name = Daily-Session-Octets
>
>         check-name = Max-Daily-Octets
>
>         reply-name = Session-Timeout
>
>         sqlmod-inst = sql
>
>         key = User-Name
>
>         reset = daily
>
>
>  query = "SELECT SUM(AcctInputOctets) + SUM(AcctOutputOctets) FROM
> radacct  WHERE UserName='%{%k}' AND UNIX_TIMESTAMP(AcctStartTime) +
> AcctSessionTime > '%b'"
>
>
>
>
>  }
>   Information in this email including any attachments may be privileged,
> confidential and is intended exclusively for the addressee. The views
> expressed may not be official policy, but the personal views of the
> originator. If you have received it in error, please notify the sender by
> return e-mail and delete it from your system. You should not reproduce,
> distribute, store, retransmit, use or disclose its contents to anyone.
> Please note we reserve the right to monitor all e-mail communication
> through our internal and external networks. SKY and the SKY marks are
> trademarks of British Sky Broadcasting Group plc and Sky International AG
> and are used under licence. British Sky Broadcasting Limited (Registration
> No. 2906991), Sky-In-Home Service Limited (Registration No. 2067075) and
> Sky Subscribers Services Limited (Registration No. 2340150) are direct or
> indirect subsidiaries of British Sky Broadcasting Group plc (Registration
> No. 2247735). All of the companies mentioned in this paragraph are
> incorporated in England and Wales and share the same registered office at
> Grant Way, Isleworth, Middlesex TW7 5QD.
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140716/7b44336f/attachment.html>