<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=utf-8">
<META content="MSHTML 6.00.5730.13" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Radius and NAS can worked in one way. Only NAS send
accounts paket to RADIUS. RADIUS CANT send packet to NAS server (if quota
user traffic limit <FONT size=3><FONT face="Times New Roman">e</FONT><SPAN
lang=EN-US style="mso-ansi-language: EN-US"><FONT
face="Times New Roman">xceeded</FONT></SPAN></FONT>)!!!!!!!</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=bbahar3@gmail.com href="mailto:bbahar3@gmail.com">Eric</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=freeradius-users@lists.freeradius.org
href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Sunday, May 03, 2009 2:09 PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re :checking authorization in
the duration of connection</DIV>
<DIV><BR></DIV><PRE style="MARGIN: 0em">NAS sends accounting update packets in periodic times. I want freeradius use this updates and <BR><FONT size=2>check my online users periodically and send Disconnect packet if user's traffic is above my<BR>
limit.</FONT><BR>How can it do this?<BR>any document about config ? <BR>Eric wrote:<BR></PRE>
<BLOCKQUOTE
style="PADDING-LEFT: 0.85em; MARGIN: 0em; BORDER-LEFT: rgb(85,85,238) 0.2em solid"><PRE style="MARGIN: 0em">Hi,<BR></PRE><TT>My radius server use ldap server
for authorize and authentication.I </TT><TT>set an attribute in ldap server
that is the check-name in sqlcounter </TT><TT>to limit users Input traffic.
I want when user traffic reaches to this </TT><TT>amount the user become
stop but radius checks ldap attributes only at </TT><TT>the first of
connection not in the middle. How can I set radius server </TT><TT>check
users traffic with the amount of this attribute in ldap server </TT><TT>in
the duration of connection? </TT></BLOCKQUOTE><TT>The radius server steps out
of the way once authentication and </TT><TT>authorization is complete, nor
does it have the ability to disconnect a </TT><TT>user from a NAS. You need to
have the NAS disconnect the user itself </TT><TT>when a threshold is reached.
This is accomplished by returning a vendor </TT><TT>specific attribute
specifying the limit for the session which the NAS </TT><TT>then maintains.
Once the limit on the NAS is reached the NAS terminates </TT><TT>the session.
You'll have to check your NAS documentation for a traffic </TT><TT>limiting
parameter. In the other common case of disconnect after a time
</TT><TT>duration it's handled by computing the session length during
</TT><TT>authorization and returning attribute 194 with the maximum number of
</TT><TT>seconds for the connection. This attribute is understood by comon NAS
</TT><TT>devices and is known variously as Ascend-Maximum-Time,
</TT><TT>Cisco-Maximum-Time or Lucent-Maximum-Time. You'll need to apply the
same </TT><TT>logic for data volume. </TT><PRE style="MARGIN: 0em"><BR><BR></PRE>
<P>
<HR>
<P></P>-<BR>List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html</BLOCKQUOTE></BODY></HTML>