Community discussions

MikroTik App
 
zhex900
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 65
Joined: Mon Apr 15, 2013 5:34 pm

Freeradius Port-Limit simultaneous-use

Thu Apr 24, 2014 3:06 pm

Hi,

I am trying to limit each user to have one session only. Currently, I can login via NAS (MikroTik) through a freeradius server. However simultaneous-use is not working. I have set Simultaneous-Use to 1 in radcheck. Port-Limit to 1 in radreply.

NAS received Port-Limit=1. I can see it in the log. But I can still can log on with the same user on two devices.

Simultaneous-Use is working if I use PAP. radtest works.
#radtest user password 127.0.0.1 100 secret

Any ideas?
 
nerdtron
Member Candidate
Member Candidate
Posts: 123
Joined: Sat Nov 30, 2013 7:49 am

Re: Freeradius Port-Limit simultaneous-use

Sat Apr 26, 2014 6:19 pm

My problem too. I hope somebody has a solution.
 
User avatar
ropix
Trainer
Trainer
Posts: 13
Joined: Thu Dec 22, 2011 6:42 am
Location: behind IP>firewall
Contact:

Re: Freeradius Port-Limit simultaneous-use

Sat Jul 05, 2014 11:30 am

I also have some problem.
 
SurferTim
Forum Guru
Forum Guru
Posts: 4636
Joined: Mon Jan 07, 2008 10:31 pm
Location: Miramar Beach, Florida

Re: Freeradius Port-Limit simultaneous-use

Sat Jul 05, 2014 4:27 pm

Simultaneous-Use is working if I use PAP. radtest works.
#radtest user password 127.0.0.1 100 secret
FreeRADIUS will never be 127.0.0.1 on the router.

Enable radius logging on your router.
/system logging
add topics=radius,debug action=memory
Try the login again and check your log.

edit: If the username is already logged in, you should get a Access-Reject with a message stating "you are already logged in 1 times".

I haven't mentioned this in a while, so I will here. If you have FreeRADIUS set to store the passwords encrypted in the SQL database, you can't use http-chap as a login-by method, You must use http-pap, or do not store the passwords encrypted in FreeRADIUS.

Who is online

Users browsing this forum: Amazon [Bot], anav and 84 guests