PfSense PPPoe Server and Enternal Freeradius server, rate limiting


  • Re: [Rate Limit on Radius Reply Attributes for PPPoE connections not working](/topic/141034/rate-limit-on-radius-r

    Hi all.
    Trying to get a PfSense box with a configured PPPoE server to rate limit connections, using an external Freeradius server. If I set WISPr attributes in the Freeradius, it still connects, but the rates are not correct. I found an earlier post here on this forum stating that I should use the MPD dictionary. How do I set the 'mpd-limit" attribute?


  • No one set up an external radius server to PfSense PPPoE server?


  • Still trying to get this working. My Freeradiuse server is managed by Daloradius. It seems that the problem is with the assignment of the mpd-limit. I can't seem to configure it correctly. It seems like it doesn't matter hat I input it does not work correctly. When I test a user's connectivity from within Daloradius, this is the response I receive:
    Executed:
    echo User-Name='Testuser',User-Password='Testing1234' | radclient -c '1' -n '3' -r '3' -t '3' -x '127.0.0.1:1812' 'auth' 'testing123' 2>&1

    Results:
    Sent Access-Request Id 254 from 0.0.0.0:51032 to 127.0.0.1:1812 length 48
    User-Name = "Testuser"
    User-Password = "Testing1234"
    Cleartext-Password = "Testing1234"
    Received Access-Accept Id 254 from 127.0.0.1:1812 to 0.0.0.0:0 length 122
    Attr-26.12341.7 = 0x6d70642d6c696d6974202b3d2022696e23313d616c6c20726174652d6c696d697420313530303030303022
    Attr-26.12341.7 = 0x6d70642d6c696d6974202b3d20226f757423313d616c6c20726174652d6c696d6974203735303030303022

    Response seems to be garbage. Pls advise.


  • I had gotten this working. Problem was that I was not formatting the attributes correctly, and I was now using the correct "operators."


  • This post is deleted!

  • @econst how did you setup speed limit in daloradius, because i am having same issue can not figure it out how to setup speed limit in daloradius. Thanks


  • @edmond
    Sorry for the delayed response, and it seems you have got it working now. I was going to suggest the same thing about the MPD dictionary that needs to be added. Aside from that you need to add "acct-interim-interval" in your profiles in daloradius as a "reply attribute" as per this post: https://forum.netgate.com/post/933184


  • Are you using freeradius inside pfsense and daloradius installed on different server if so how did you connect daloradius with freeradius in pfsense


  • @econst am i on the right direction, what do i need to put on the value ?daloradius.png


  • @edmond

    I am just using PfSense for the PPPoE part. I have an external Freeradius server runnning on Ubuntu 18.04.

    You need to add the dictionary as per the "redmine" link in a post before this one.