Re: [Radiusplugin-users] Anyone knows how to use Radiusplugin to limit client's traffic?

[Ralf Lübben]

Hi,

the RADIUS server can support it in combination with OpenVPN:

1) The RADIUS server cannot disconnect a user from OpenVPN, but OpenVPN re-
authenticates a user in a specific interval which can be configured with the 
option "--reneg-sec", than the authentication/re-authentication will fail, if 
the user exceeds a traffic limit. 
So the traffic limit will not be kept exactly but approximately.

2) The RADIUS server can reject authentication requests, if the some values 
are exceeded. This is implemented by "Rlm_sqlcounter", examples can be found 
in the freeradius directory "freeradius/sql/postgresql", a installation guide 
at http://wiki.freeradius.org/Rlm_sqlcounter .
You should consider the RADIUS accounting attributes "Acct-Input-Octets", 
"Acct-Output-Octets", "Acct-Input-Gigawords" and "Acct-Output-Gigawords".


I would be great if you can post a complete solution if you find one.

Regards,
Ralf 




Am Dienstag, 8. Juni 2010 03:56:55 schrieb Tony Zhou:
> Hi all,
> 
> 
> 
> I'm running Freeradius 2.1+Postgresql 8.4.4+OpenVPN on Ubuntu 9.10 x86. It
> runs smoothly now, however, I want to know that if there is any way to
>  limit per user's traffic, like 10G/month, and disconnect/reject their
>  connection when the limitation has been reached.
> 
> 
> 
> I have asked this on FreeRADIUS maillist and they said that is NAS client
> related. Is there any function in Radiusplugin or any additional script
> could do this?
> 
> 
> 
> Thanks in advance.
>