Freeradius 2.1.12 CoA configuration

Alan DeKok aland at deployingradius.com
Wed Jul 22 22:01:13 CEST 2015


On Jul 22, 2015, at 6:15 PM, mohammed farouk <mfaroukg at gmail.com> wrote:
> Please advise me for the correct configuration for the CoA disconnect, i am
> having missing something when i execute the command :
> 
> echo "User-Name='sunny',Acct-Session-Id=55af81be0000000b" | radclient -c
> '1' -n '3' -r '3' -t '3' -x '127.0.0.1:3799' 'disconnect' 'testing123' 2>&1

  radclient sends a CoA packet to a NAS.  Except you've sent the packet to 127.0.01, which is probably not a NAS.

> in the sites-available/originating-coa
> 
>        update coa {
>               User-Name = "%{User-Name}"
>               Acct-Session-Id = "%{Acct-Session-Id}"
>               NAS-IP-Address = "%{NAS-IP-Address}"
>        }
> 
> is this correct?

  Did you read the comments at the start of the "originate-coa" file?  If not, go read them.

> the debugging:
> 
> rad_recv: Disconnect-Request packet from host 127.0.0.1 port 49510, id=113,
> length=45
> User-Name = "sunny"
> Acct-Session-Id = "55af81be0000000b"
> server coa {
> # Executing section recv-coa from file /etc/freeradius/sites-available/coa
> +- entering group recv-coa {...}
> ++[ok] returns ok
> # Executing section send-coa from file /etc/freeradius/sites-available/coa
> +- entering group send-coa {...}
> ++[ok] returns ok
> } # server coa
> Sending Disconnect-ACK of id 113 to 127.0.0.1 port 49510
> Finished request 0.
> 
> but the user still connect and it didn't disconnect it, what exactly i need
> to do ?

  Send the CoA packet to the NAS.  Not to the RADIUS server.

  Alan DeKok.




More information about the Freeradius-Users mailing list