Modules - dictionary

Oscar Jofre oscar at jofre.com
Tue Mar 15 07:58:35 CET 2016


>> Is not possible to add ipaddr (&NAS-IP-Address) on accounting ?

>  Maybe... it depends what you mean by that.

I mean, if I have 200 clients identified by IP NAS-IP-Address (openVPN IP), instead of adding 200:

home_server example-coa {
        type = coa
        ipaddr = 172.16.0.10
	 .....
}

home_server example-coa {
        type = coa
        ipaddr = 172.16.0.11
	 .....
}

......


home_server example-coa {
        type = coa
        ipaddr = 172.16.0.209
	 .....
}


Just send the coa request on accounting adding NAS-IP-Address ...

Because I testes and works just :
	echo "user-name=pru, Framed-IP-Address=172.17.1.247" | radclient -x 172.16.0.10:3799 disconnect secret

Could I add on accounting:

	update disconnect  {
	       &User-Name = "%{User-Name}"   -->pru
	       Framed-IP-Address = "%{Framed-IP-Address}"  -->172.17.1.247
	       &NAS-IP-Address = "%{NAS-IP-Address}" --> 172.16.0.10
	}

On accounting I have all the parameters and even the radius secret is the same on all my clients .... So if I add        &NAS-IP-Address instead of use ipaddr could use        &NAS-IP-Address then
I don't need to add to many entruies on originate-coa.

I tried and didn’t work ... Any idea ?

Thanks !




-----Mensaje original-----
De: Freeradius-Users [mailto:freeradius-users-bounces+oscar=jofre.com at lists.freeradius.org] En nombre de Alan DeKok
Enviado el: martes, 15 de marzo de 2016 0:39
Para: FreeRadius users mailing list
Asunto: Re: Modules - dictionary

On Mar 14, 2016, at 6:03 PM, Oscar Jofre <oscar at jofre.com> wrote:
> Then that means that for each Nas-client (mikrotik) connected with the freeradius, I have to add on originate-coa:

  Yes.

> That’s not good for me.

  That's how RADIUS works.

> Is not possible to add ipaddr (&NAS-IP-Address) on accounting ?

  Maybe... it depends what you mean by that.

> I think I misunderstand something ...

  RADIUS is simple.  It uses fixed IPs to define both client and server.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list