Centralized accounting and coa/disconnect

[Terry Burton]

On Fri, 16 Dec 2022 at 09:57, Matthew Newton via Freeradius-Users
<freeradius-users at lists.freeradius.org> wrote:
> On 16/12/2022 01:31, BuzzSaw Code wrote:
> > Is there a way to have the centralized accounting server receive the
> > disconnect packet, lookup the info in that mysql instance, then proxy
> > that to the right source RADIUS server, so that server can send the
> > coa (or disconnect) to the NAS ?
>
> See the coa-relay virtual server. That looks up the session details in
> the database and sends the CoA to the correct destination.
>
> You may need to modify it to also look up the relevant RADIUS server.
> Proxy it to the RADIUS server, which can then forward it on to the
> correct NAS.

And be aware when performing the final leg of proxying to the NAS,
that some devices do not accept a Proxy-State attribute in a
CoA/Disconnect packet, so you must strip it:

        pre-proxy {
                update proxy-request {
                        # Some NASs don't like proxied CoA/PoD packets
                        &Proxy-State !* ANY
                }
        }

(FreeRADIUS does not need this to correlate the reply.)