Simultaneous-Use in proxy
Renato Sousa
rensousa at gmail.com
Mon Jul 13 22:48:41 CEST 2015
Hi Alan,
> It will check Simultaneous-Use in the inner-tunnel, but it may not have
> access to all of the session data.
>
> And you've got to ensure that the User-Name in the Accounting-Request
> packet is the same as for the Access-Request. i.e. not "anonymous".
>
That's exactly the problem. I decided to upgrade to the 3.0.8 version
freeradius. Now I can clearly see the values of usernames.
################ Access-Request
(88) Received Access-Request Id 35 from [NAS_IP]:23710 to [FR_IP]:1812
length 181
*(88) User-Name = 'myuser at mydomain'*
(88) NAS-IP-Address = 172.19.13.15
(88) NAS-Identifier = '24a43cb0fbad'
(88) NAS-Port = 0
(88) Called-Station-Id = '2A-A4-3C-B2-FB-AD:mySSID'
(88) Calling-Station-Id = '34-BB-26-C2-1D-60'
################ Proxying Access-Request
(88) Proxying request to home server [proxy_IP] port 1812 timeout 20.000000
(88) Sent Access-Request Id 92 from 0.0.0.0:46389 to [proxy_IP]:1812 length
191
*(88) User-Name = 'myuser at mydomain'*
(88) NAS-IP-Address = 172.19.13.15
(88) NAS-Identifier = '24a43cb0fbad'
(88) NAS-Port = 0
(88) Called-Station-Id = '2A-A4-3C-B2-FB-AD:mySSID'
(88) Calling-Station-Id = '34-BB-26-C2-1D-60'
################ Access-Accept from proxy
(100) Received Access-Accept Id 231 from [proxy_IP]:1812 to [FR_IP]:46389
length 173
*(100) User-Name = 'myuser'*
################ Accounting-Request
(101) Received Accounting-Request Id 48 from [NAS_IP]:41124 to [FR_IP]:1813
length 160
(101) Acct-Session-Id = '00001A59-00000037'
(101) Acct-Status-Type = Start
(101) Acct-Authentic = RADIUS
*(101) User-Name = 'myuser'*
(101) NAS-IP-Address = 172.19.13.15
(101) NAS-Identifier = '24a43cb0fbad'
(101) NAS-Port = 0
(101) Called-Station-Id = '2A-A4-3C-B2-FB-AD:mySSID'
How to ensure the same username in the Accounting-Request and
Access-Request?
How to configure proxy response in format user at domain?
Best Regards,
Renato
More information about the Freeradius-Users
mailing list