What are the consequences of a low Acct-Interim-Interval?

[Alan DeKok]

On Oct 16, 2019, at 3:28 PM, Houman <houmie at gmail.com> wrote:
> 
> The benefit for 15s would be to identify users that have overstayed their
> welcome and kick them out sooner.

  That's what Session-Timeout is for.  You can set a timeout to 3600s (or to anything else you want).  You then know that people are allowed to be in for 3600s, and that they will be kicked off the network after that.  They can then re-authenticate, at which time you can determine if they are allowed back on the network.

  Playing games with Acct-Interim-Interval is just a hack.  Use the standard RADIUS solutions instead of fragile hacks.

  Alan DeKok.