RE: [Radiusplugin-users] Anyone knows how to use Radiusplugin to limit client's traffic?

[Tony Zhou]

Hi,

Now I have finished the traffic limitation part, which would detect user's
monthly traffic when login and if exceeds the radius server would refuse to
connect.

Thanks so much! I would post the method shortly. (It is a very dirty one
though; I'm a newbie to postgresql and radius :-P)

PS: Is there any better way to kick user offline when it reaches the limit?
Since the acctinputoctets and acctoutputoctets would not update before the
user logs off.

-----Original Message-----
From: Ralf Lübben [mailto:address@hidden 
Sent: Tuesday, June 08, 2010 4:07 PM
To: address@hidden
Cc: Tony Zhou
Subject: Re: [Radiusplugin-users] Anyone knows how to use Radiusplugin to
limit client's traffic?

Hi,

the RADIUS server can support it in combination with OpenVPN:

1) The RADIUS server cannot disconnect a user from OpenVPN, but OpenVPN re-
authenticates a user in a specific interval which can be configured with the
option "--reneg-sec", than the authentication/re-authentication will fail,
if the user exceeds a traffic limit. 
So the traffic limit will not be kept exactly but approximately.

2) The RADIUS server can reject authentication requests, if the some values
are exceeded. This is implemented by "Rlm_sqlcounter", examples can be found
in the freeradius directory "freeradius/sql/postgresql", a installation
guide at http://wiki.freeradius.org/Rlm_sqlcounter .
You should consider the RADIUS accounting attributes "Acct-Input-Octets",
"Acct-Output-Octets", "Acct-Input-Gigawords" and "Acct-Output-Gigawords".


I would be great if you can post a complete solution if you find one.

Regards,
Ralf 




Am Dienstag, 8. Juni 2010 03:56:55 schrieb Tony Zhou:
> Hi all,
> 
> 
> 
> I'm running Freeradius 2.1+Postgresql 8.4.4+OpenVPN on Ubuntu 9.10 
> x86. It runs smoothly now, however, I want to know that if there is 
> any way to  limit per user's traffic, like 10G/month, and 
> disconnect/reject their  connection when the limitation has been reached.
> 
> 
> 
> I have asked this on FreeRADIUS maillist and they said that is NAS 
> client related. Is there any function in Radiusplugin or any 
> additional script could do this?
> 
> 
> 
> Thanks in advance.
>