[EXT] problem with Simultaneous-Use roaming

[Mustafa Nassir]

Ok , if I have 200 guest client connect on 802.1x access point and I have
12 ap in public area these client go from one ap to other every day and I
need each users get there credit username/pass (peap) one session per host
so if this user online no other one can login to network and stay connect
when they go from one ap to another,  because some users give there credit
to there frind so I need just one can login with it , what you think if I
create sqlcounter to limit total bandwidth for there credit to solve this
problem .

في السبت، ١٥ يونيو، ٢٠١٩ ١٢:٤٩ ص Peter Lambrechtsen <peter at crypt.nz> كتب:

> There isn't much you can do about it apart from writing code to disconnect
> old users when a new one connections.
>
> You can write code to COA disconnect existing sessions on a Start in post
> accounting.
>
> Or write a Cron job to do a select through the database and disconnect
> multiple sessions based on the same username apart from the latest start.
>
> If they are the same subscriber then what is the harm DXing them? Otherwise
> you may need to be careful.
>
> On Sat, 15 Jun 2019, 03:46 Mustafa Nassir, <mustafa.n.gaid at gmail.com>
> wrote:
>
> > nice sound , do u have any suggestion what is best way to limit total
> users
> > uses in without use  (Simultaneous-Use) , i test  delay-time but its same
> > things the users cant reconnect when it go to new ap signal .
> >
> > On Fri, Jun 14, 2019 at 6:09 PM Brian Julin <BJulin at clarku.edu> wrote:
> >
> > >
> > > Mustafa Nassir <mustafa.n.gaid at gmail.com> wrote:
> > >
> > > > i have problem with 802.1X , i have multi openwrt access point all it
> > > work
> > > > with wpa2-enterprise and freeradius server with mysql in other side ,
> > in
> > > > freeradius i enable Simultaneous-Use my problem is when my users move
> > > from
> > > > first ap to second or to third ap its disconnect and reconnect and in
> > > some
> > > > time its take over 10-30 second to reconnect successful . i set ideal
> > > > time-out 1s and life-time 1s . its reconnect faster than first one ,
> > but
> > > > its stay disconnect when they move , any idea ?
> > >
> > > Probably the APs are not sending an Accounting Stop packet soon enough.
> > > You'll have to do some packet analysis to see how late they are.  It
> > might
> > > be possible to insert a delay in the authentication to wait for the
> > > Accounting-Stop
> > > before checking Simultaneous-Use... dunno, I never used this feature
> for
> > > exactly
> > > this reason.
> > > -
> > > List info/subscribe/unsubscribe? See
> > > http://www.freeradius.org/list/users.html
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html