What are the consequences of a low Acct-Interim-Interval?

Alan DeKok aland at deployingradius.com
Wed Oct 16 23:05:49 CEST 2019


On Oct 16, 2019, at 4:54 PM, Houman <houmie at gmail.com> wrote:
> 
> That's a fair point, but I don't think this works with my NAS. I have set
> it to 10 seconds for testing purposes. I was expecting it to retry the auth
> after the session runs out. But it remains entirely disconnected instead.

  In general the NAS doesn't retry.  The end-user does (or their system).

  And a 10s timeout might work, but it's generally low.  If you set it to ~300, then the authentication might restart.

 Again, the RADIUS server is *not* in control here.  It can advise the NAS / end user to do something, but they are free to ignore the RADIUS servers recommendations.  This is one of the key concepts which is very hard to make people understand:  No amount of poking the RADIUS server will make the NAS do something.

  Alan DeKok.




More information about the Freeradius-Users mailing list