FreeRadius-Response-Delay

[Pshem Kowalczyk]

Hi,

We use a pair of BNGs to provide redundancy. The BNGs terminate PPPoE and
now also IPoE sessions. Since dropping a large number of subs is disruptive
we tend to use PADO-delay for the PPPoE ones to move them slowly from one
BNG to the other - we set the delay about week in advance. There is no such
option for IPoE since the BNG starts to build the session bindings
(including querying radius) as soon as it sees either DHCP or ARP packets.
If I could delay the accept on one BNG then the other one would've built
the bindings and allowed DHCP through (or responded to ARP). This would
effectively start moving the sessions onto the other BNG.

I realise I can call an external script (exec bash with sleep 5 or sth) but
it doesn't feel like an elegant solution (not to mention the load this will
cause).

kind regards
Pshem


On Thu, 26 May 2016 at 17:45 Herwin Weststrate <herwin at quarantainenet.nl>
wrote:

> On 26-05-16 07:24, Pshem Kowalczyk wrote:
> > Hi,
> >
> > I would like to delay access-accept responses to some requests (we have
> > multiple ones coming simultaneously from 2 BNGs, due to the way access
> > network is built). I found the FreeRADIUS-Response-Delay
> > and FreeRADIUS-Response-Delay-USec attributes, but I'm clearly doing
> > something wrong, as the accept is sent immediately:
> >
> > {...}
> >
> > (I've  tried various combinations of the control/reply USec/Sec)
> > Delay on Auth-Reject works as expected.
> >
> > googling didn't turn up any examples either.
> > I'm running 3.0.11 - how are these attributes supposed to be used?
>
> These attributes only work for Access-Rejects and DHCP-NAKs. It could be
> changed to allow things like accept to delay too, but I think this is
> such an unusual use case that there is probably a better solution for it.
>
> --
> Herwin Weststrate
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html