Just something in general that I’m pondering about…
About this whole Radius Disconnect topic that’s floating arround here.. Is it possible, or can support perhaps be added, to execute events (more than likely via scripts), based on radius requests received?
Say, a user connects via radius to MT1. I can then “theoretically”, send a Radius Accounting Start to MT2. Ideally, I want MT2 then, to do something with the data received in the Accounting packet… For example, setup a firewall rule, or a route, etc etc etc.
Doubt it’s supported now, would be nice if it can perhaps be added to the todo list for the distant future…
There are logon / logoff scripts available with the HotSpot (I wish they were available with PPPoE too!)
What you are describing should be done by the radius server.
Radius server recieves an access request, OKs it, runs a script on the NAS (Mikrotik in this case) to do whatever you want. When the user logs off the same thing can be done too.
Yeah. It becomes especially difficult, if you want to authenticate on one nas, but dynamically configure a router further up the chain
At the moment I use a bunch of scripts that execute on the background in Radius during the authentication phase, but it’s not really very efficient. Would LOVE for something like this to be added.
I agree, I just posted a question about creating a dynamic queue graph rule that could easily be done if we had logon-log-off scripts like the hotspot, or possibly even better, radius side scripts (less places to manage)