<pre style="margin: 0em;">NAS sends accounting update packets in periodic times. I want freeradius use this updates and <br><font size="2">check my online users periodically and send Disconnect packet if user's traffic is above my<br>
limit.</font><br>How can it do this?<br>any document about config ? <br>Eric wrote:<br></pre>
<blockquote style="border-left: 0.2em solid rgb(85, 85, 238); margin: 0em; padding-left: 0.85em;"><pre style="margin: 0em;">Hi,<br></pre><tt>My radius server use ldap server for authorize and authentication.I
</tt><tt>set an attribute in ldap server that is the check-name in sqlcounter
</tt><tt>to limit users Input traffic. I want when user traffic reaches to this
</tt><tt>amount the user become stop but radius checks ldap attributes only at
</tt><tt>the first of connection not in the middle. How can I set radius server
</tt><tt>check users traffic with the amount of this attribute in ldap server
</tt><tt>in the duration of connection?
</tt></blockquote>
<tt>The radius server steps out of the way once authentication and
</tt><tt>authorization is complete, nor does it have the ability to disconnect a
</tt><tt>user from a NAS. You need to have the NAS disconnect the user itself
</tt><tt>when a threshold is reached. This is accomplished by returning a vendor
</tt><tt>specific attribute specifying the limit for the session which the NAS
</tt><tt>then maintains. Once the limit on the NAS is reached the NAS terminates
</tt><tt>the session. You'll have to check your NAS documentation for a traffic
</tt><tt>limiting parameter. In the other common case of disconnect after a time
</tt><tt>duration it's handled by computing the session length during
</tt><tt>authorization and returning attribute 194 with the maximum number of
</tt><tt>seconds for the connection. This attribute is understood by comon NAS
</tt><tt>devices and is known variously as Ascend-Maximum-Time,
</tt><tt>Cisco-Maximum-Time or Lucent-Maximum-Time. You'll need to apply the same
</tt><tt>logic for data volume.
</tt>
<pre style="margin: 0em;"><br><br></pre>