Renew time on Radius

I am trying to make the MT router recheck radius for new attributes every day or hour or however often i want so that it updates whatever in the router(using DHCP). I have tried several different attributes, but none of them seem to make it update.

Anyone know how to do this?

Thanks

Attributes are only checked during the Authentication phase of Radius. The only interm communications between a NAS and Radius is during the Accounting Update, which merely informs the Radius Server how much resources the client has used.

If you make alterations to any attributes that is communicated during Authentication, the client must re-authenticate to receive those updated attributes. That is essentially why we have Session-Timeout and Idle-Timeout values in Radius.


C

so if i set session-timeout to say 60. every 60 seconds the server will re-auth the client and get any new attributes correct?

If you set session-timeout to 60, your client will be disconnected every 60 seconds, and they will have to re-authenticate.

If you set idle-timeout to 60, your clients will be disconnected as soon as their connection has been idle for 60 seconds.

If you have wireless clients on PPPoE or perhaps even MAC Authentication via Radius, I can assure you, you will not have very happy customers if they get disconnected every 60 seconds…

Radius ain’t a protocol used to reconfigure parts of your network automatically whenever you want to… Perhaps you’d need to look at why you need to constantly change all the settings so often… Just my 2c


C

well really it would be 1d but i need to test it, so i wanted to set it to 60s just for testing purposes. I want to kill their bandwidth if say they are a certain amount of time late in payment or something. the dhcp clients should just re-auth right?

and i just tested it out and for future reference. setting the timeout to 60 or whatever you want DOES NOT affect the clients, at least not in 2.9.15. It automatically updates their queue if necessary, and doesnt kill the lease or anything, making it one of the absolutely coolest things ever!

Well sure, DHCP it wont. DHCP won’t ‘take back’ the client’s lease

You have a max-lease time in thise case, which you have set to 60s I presume. Once that 60s expired, it is really up to the client whether he wants to attempt to get a new IP or not (Perhaps more accurately, the server won’t automatically firewall the expired IP on the lease because it’s expired). It’s one of the reasons why I don’t like using DHCP.

Perhaps I’m just not understanding your circumstances correctly… If it works, great. Glad to have been able to help :slight_smile:

oh no, i have the dhcp lease set at 3 days, and even that is shorter than what ill set it for in production. i just wanted it to update the bandwidth which it is doing.

I have my wireless clients authenticated through freeradius and sql mac-address authentication. I would like to check their attributes every 24 hours, so I need a smart way to de-authenticate them daily. Does the MT radius client accept the Session-Timeout attribute in the radius response ? How should I set it?

raffacol can you set bandwidth queues via wireless radius?