OPNsense Forum

English Forums => General Discussion => Topic started by: ryan.low on August 10, 2017, 11:41:37 am

Title: Radius Accounting & Nas Identifier
Post by: ryan.low on August 10, 2017, 11:41:37 am

Hi guys,
I setup a Opnsense 17.7 with Captive Portal network and authenticated successfully with Freeradius3. But there is no accounting send to server. I had selected "Authentication & Accounting" in Access->Server.

Secondly, how can we define the NAS-ID in Opnsense instead of random string.

Thanks.

Title: Re: Radius Accounting & Nas Identifier
Post by: mimugmail on August 10, 2017, 02:15:21 pm

Hi,

Accounting is currently not implemented within FreeRADIUS plugin.
I'll have a look at it the next weeks since there are more people asking for it

Title: Re: Radius Accounting & Nas Identifier
Post by: ryan.low on August 11, 2017, 02:38:06 am

Hi, great to hear that. Btw,will there be possible to build-in WISPr VSA? to achieve bandwidth control per device depend on radius reply?

Title: Re: Radius Accounting & Nas Identifier
Post by: mimugmail on August 11, 2017, 06:20:09 am

If they don't rely on accounting it should be very easy.
Just post a list of reply attributes.

Title: Re: Radius Accounting & Nas Identifier
Post by: ryan.low on August 15, 2017, 03:41:14 am

We cross check the NAS-Identify and reply attribute WISPr-Bandwidth-Max-Up/Down to do speed control.
Will be grate if we can edit the NAS-identifier at CP and read the reply from FR3.

Cheers.

Title: Re: Radius Accounting & Nas Identifier
Post by: mimugmail on October 05, 2017, 12:03:32 pm

Hi,

I'm back at this topic, sorry for the delay.
One question, do you expect the OPNsense to the shaping cause of the attributes or shall your APs do the shaping?

Title: Re: Radius Accounting & Nas Identifier
Post by: ryan.low on October 11, 2017, 04:52:46 am

Hi Mimugmail,
I would expect OPNsense when we reply the WISPr attributes.
We can reply empty attributes if we expect the APs to do shaping. There are APs can do shaping standalone. but we can only put 1 value and apply to all clients.

Unfortunately, none APs can shape dynamically without using their controllers. We don't use OPNsense if we Controllers able to provide captive portal.

Correct me if I'm wrong.  :D

Cheers