Setting up CoA properly.

[Saied Ahadi]

Sorry I am having trouble finding docs for CoA. Perhaps I am not looking in
the right place.

The current way our  CoA works in free radius 3 is by adding each nas tothe
/etc/freeradius/3.0/sites-config/coa-relay/homeservers/ as a conf file.

home_server nastest{
        type = coa

        # Update these to match your NAS
        ipaddr = 10.10.10.10
        port = 3799
        secret = secret

        coa {
                irt = 2
                mrt = 16
                mrc = 5
                mrd = 30
        }
}

Then adding the NAS we added to
/etc/freeradius/3.0/sites-config/coa-relay/pool.conf by listing the name of
the file.
home_server_pool coa-pool {
        type = fail-over
        home_server = nastest
        virtual_server = originate-coa-relay
}


Then adding the detail-coa file in
/etc/freeradius/3.0/mods-enabled/detail_coa
# enable this module to configure coa detail logs, the logs are used to
# store the incoming coa request attributes before they are relayd on to
the NAS
#
    detail detail_coa {
        filename = ${radacctdir}/detail_coa
        escape_filenames = no
        permissions = 0600
        header = "%t"
        locking = yes
    }
#

Then adding the CoA relay file in /etc/freeradius/sites-enabled/


And lastly adding each NAS  into the mysql db as a NAS.






On Wed, Oct 23, 2024 at 8:43 AM Alan DeKok <aland at deployingradius.com>
wrote:

> On Oct 23, 2024, at 8:38 AM, Saied Ahadi <saiedahadi at gmail.com> wrote:
> >
> > Yeah it does work but the person who did the work is no longer here and
> did
> > not provide any information on where or how they were able to get CoA to
> > work in FR3. I would appreciate if you could point me in the right
> > direction to see if there is a better way of doing CoA setup.
>
>   Better than what?  You're asking for help, but are refusing to say what
> the system is doing.
>
>   At this point, I have to say that there is substantial documentation on
> all parts of the server, including CoA.  We're not going to cut & paste
> that documentation into an email message.  It's available to you, you can
> go read it.
>
>   If you have questions about specific functionality, then ask clear and
> detailed questions.
>
>   If you're going to ask "did I do it right?" but not explain what you
> did, then it's impossible to help you.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>