(RADIATOR) Stopping processing on Invalid radius requests

Mark - Orcon Support mark at orcon.net.nz
Thu Oct 25 21:06:22 CDT 2001


I use a handler like this at the TOP of the config file, although there may
be a better/more correct way.

<Handler User-Name=/unauthenticated/>
    AccountingHandled
    SessionDatabase SDBnull
</Handler>

<SessionDatabase NULL>
    Identifier SDBnull
</SessionDatabase>

.........................................................................

Mark Mackay,
Network Coordinator,
Orcon Internet.


> From: "Martin Edge" <martin.edge at phoneware.net.au>
> Date: Fri, 26 Oct 2001 11:38:50 +1000
> To: <radiator at open.com.au>
> Subject: (RADIATOR) Stopping processing on Invalid radius requests
> 
> Hey Guys,
> 
> Is there a way to stop processing some radius packets depending on
> information?
> 
> Like, for instance.. the radius stop record below is sent via a USR Nas
> who hasn't been able to authenticate a user, but it still sends the
> stop/start record because of the connection itself. There are other
> Ascend NAS's that react the same way for us.
> 
> If I can possibly build a hook to just say drop this request, then I
> would save filling up logs with unnecessary SQL errors
> (Framed-IP-Address is required in all SQL entries, and where they aren't
> allocated one..)
> 
> I'm not sure the syntax required in the hooks to say "ACCEPT" or
> "REJECT" user, or to just say "stop processing"
> 
>       User-Name = "unauthenticated"
>       NAS-IP-Address = 202.160.140.3
>       Acct-Status-Type = Stop
>       Acct-Session-Id = "51576937"
>       Acct-Delay-Time = 0
>       Service-Type = Framed-User
>       NAS-Port-Type = Async
>       NAS-Port = 788
>       USR-Interface-Index = 2044
>       USR-Chassis-Call-Slot = 4
>       USR-Chassis-Call-Span = 1
>       USR-Chassis-Call-Channel = 20
>       USR-Unauthenticated-Time = 2
>       USR-Modem-Training-Time = 18
>       Calling-Station-Id = "0298073422"
>       Called-Station-Id = "0282053301"
>       USR-Modulation-Type = v90Digital
>       USR-Simplified-MNP-Levels = ccittV42
>       USR-Simplified-V42bis-Usage = ccittV42bis
>       USR-Connect-Speed = 44000_BPS
>       Framed-Protocol = PPP
>       Acct-Session-Time = 20
>       Acct-Terminate-Cause = User-Request
>       Disconnect-Reason = 8
>       Acct-Input-Octets = 127
>       Acct-Output-Octets = 215
>       Acct-Input-Packets = 5
>       Acct-Output-Packets = 7
>       Call-Arrived-time = 183605368
>       Call-Lost-time = 183605388
> 
> Thanks,
> Martin
> 
> -----------------------------------------
> Martin Edge
> Network Engineer
> Phoneware Online
> eMail:  <mailto:Martin.Edge at phoneware.net.au>
> Martin.Edge at phoneware.net.au
> Phone: +613 9640 4140 ext. 193
> 
> "Creating the structure necessary for your
> business internet requirements"
> -----------------------------------------
> 
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list