Radius CoA / Disconnect Question

Hello,

Having a little issue, on my network i use radius for both the wireless associations and also the hotspot authentication of the users.

However when i send a CoA request like:

echo “User-Name=00:15:xx:xx:xx:xx” | radclient 10.10.1.12:3799 disconnect

It disconnects the user from the wireless but does not disconnect the user’s hotspot session for reauthentication. I use mac auth for hotspot and wireless on two different radius servers, both use the mac id as the username.

Any suggestions?

Wild guess, but maybe the Service-Type is set to something else and you can specify it as an additional attribute to find the session?

Ok so ive tried,

Nas-Port-Type=19
Framed-IP=xxx.xx.x.x
Service-Type=Framed-User
Service-Type=Hotspot (dont laugh)


But all that happened was that it just simply disconnected the wireless association and the unit just reassociated and didnt disconnect the hotspot session.


I have a work around in mind… but this is gonna involve me changing the mac auth for the wireless from xx:xx:xx:xx:xx:xx to maybe xx-xx-xx-xx-xx-xx, im pretty sure if it did that, it should work as expected… right?

That’s a neat idea.

You can look up the correct Service-Type by logging the ‘radius’ topic. I think you’d have to send two disconnect packets, one for wireless with its Service-Type and one for the Hotspot with its Service-Type - if that works at all, that is.