PPPoE Radius "RADIUS Accounting Update" not working

cenriq

I was able to get PfSense to do the bandwidth limiting I needed. My problem continues to be that accounting updates does seem to be working. Did a packet capture on the relevant interface and saw no data in/out for accounting.

I'm using an external Freeradius server. It is configured with the PfSense and MPD dictionaries. I have set Accounting updates to 330 second in the PPPoE config to be above the minimum requirement of 5 minutes as per the RFC. Anywhere else I need to set anything to get the accounting to work?

I had also input the PfSense and MPD dictionaries in PfSense also.

nimamhd

For some reason, "Accounting updates" is not working in PPPoE config page.
you should do it manually.

There are two options. the first i prefer, use "Acct-Interim-Interval" reply attribute in your external radius to update user accounting in specific interval.

second option, add "set auth acct-update 330" to your pfsense configuration of PPPoE section in "/etc/inc/interfaces.inc" and "save" PPPoE in GUI.
this line will force MPD to update accounting data every 330 seconds.

be careful when you edit this file. it may breaks your pfsense functionality.

cenriq

@nimamhd
For your first option. Is there a "global" setting or I need to do for each user?

Thanks for the response.

viktor_g

@nimamhd said in PPPoE Radius "RADIUS Accounting Update" not working:

For some reason, "Accounting updates" is not working in PPPoE config page.
you should do it manually.

There are two options. the first i prefer, use "Acct-Interim-Interval" reply attribute in your external radius to update user accounting in specific interval.

second option, add "set auth acct-update 330" to your pfsense configuration of PPPoE section in "/etc/inc/interfaces.inc" and "save" PPPoE in GUI.
this line will force MPD to update accounting data every 330 seconds.

be careful when you edit this file. it may breaks your pfsense functionality.

Redmine issue created: https://redmine.pfsense.org/issues/10869

nimamhd

@viktor_g
Thank you very much

nimamhd

@cenriq
You have external RADIUS server and you did`t say what it is. btw, in FreeRADIUS i use "radgroupreply" group to reply "Acct-Interim-Interval" attribute.

all users that members of your group, will receive Interim-Interval.

cenriq

@nimamhd

Thanks again for your response. Yes it is an external Freeradius server I have running in the cloud with Daloradius and other stuff.

Will try your suggestions shortly. Will keep you posted. Thanks.

cenriq

@nimamhd
You suggestion to use "Acct-Interim-Interval" in radgroupreply worked. I am using Daloradius for management, so I had created Groups/profiles for users. I just had to put this attribute in the profiles.

If I can ask what exactly did you do to be able to disconnect a user?

nimamhd

@cenriq
Disconnect a user is more complicated. combination of rlm_counter, unlang and policy needed to decide which user should disconnect from NAS.

example in pseudo code:

if ( user bandwidth usage > daily usage)
update reply {
disconnect User-Name
}

cenriq

@nimamhd

Thanks again for your response. I'm a newbie to this Freeradius stuff, so I'm not familiar with unlang. In Daloradius there is a "Disconnect User" button. I just thought that there was something simple one can do with it to get it to work.