Hello all!
So I’ve googled this to death and can’t seem to find what I am looking for. This isn’t a regular hotspot scenario, we are a WISP attempting to use hotspot features to disable monthly paying customers across our network.
I have radius working just fine, authenticating and queueing based on MAC. But what I want to do is have Radius re-check every 24 hrs or so to see if their account is still set to active. I was able to do this by making a session limit, but that resulted in a brief service interruption every time it reestablished the connection. I’ve tried so many ways I can’t remember them all now, I know I tried MAC cookie timeout, and session timeout. Is it possible to get what I want without any service interruption?
I’ve considered just doing mac auth with just DHCP and RADIUS, but my only concerns are that someone could conceivably catch on and assign themselves a static ip, and it would be nice if there was a way to let them get an IP even if they failed, but have them blocked so we could still log into their radio from the office.
PPPoE is an option, but I think it could have the same issue as the hotspot with re-auth, and it has about 10 percent overhead on the encapsulated packets.
Please correct me if I’m wrong with either of the other options! And any suggestions will be greatly welcomed!
Thanks in advance!
