Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    PfSense PPPoe Server and Enternal Freeradius server, rate limiting

    Traffic Shaping
    2
    10
    160
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      econst last edited by

      Re: [Rate Limit on Radius Reply Attributes for PPPoE connections not working](/topic/141034/rate-limit-on-radius-r

      Hi all.
      Trying to get a PfSense box with a configured PPPoE server to rate limit connections, using an external Freeradius server. If I set WISPr attributes in the Freeradius, it still connects, but the rates are not correct. I found an earlier post here on this forum stating that I should use the MPD dictionary. How do I set the 'mpd-limit" attribute?

      1 Reply Last reply Reply Quote 0
      • E
        econst last edited by

        No one set up an external radius server to PfSense PPPoE server?

        1 Reply Last reply Reply Quote 0
        • E
          econst last edited by

          Still trying to get this working. My Freeradiuse server is managed by Daloradius. It seems that the problem is with the assignment of the mpd-limit. I can't seem to configure it correctly. It seems like it doesn't matter hat I input it does not work correctly. When I test a user's connectivity from within Daloradius, this is the response I receive:
          Executed:
          echo User-Name='Testuser',User-Password='Testing1234' | radclient -c '1' -n '3' -r '3' -t '3' -x '127.0.0.1:1812' 'auth' 'testing123' 2>&1

          Results:
          Sent Access-Request Id 254 from 0.0.0.0:51032 to 127.0.0.1:1812 length 48
          User-Name = "Testuser"
          User-Password = "Testing1234"
          Cleartext-Password = "Testing1234"
          Received Access-Accept Id 254 from 127.0.0.1:1812 to 0.0.0.0:0 length 122
          Attr-26.12341.7 = 0x6d70642d6c696d6974202b3d2022696e23313d616c6c20726174652d6c696d697420313530303030303022
          Attr-26.12341.7 = 0x6d70642d6c696d6974202b3d20226f757423313d616c6c20726174652d6c696d6974203735303030303022

          Response seems to be garbage. Pls advise.

          1 Reply Last reply Reply Quote 0
          • E
            econst last edited by

            I had gotten this working. Problem was that I was not formatting the attributes correctly, and I was now using the correct "operators."

            E 1 Reply Last reply Reply Quote 0
            • E
              edmond last edited by

              This post is deleted!
              1 Reply Last reply Reply Quote 0
              • E
                edmond @econst last edited by

                @econst how did you setup speed limit in daloradius, because i am having same issue can not figure it out how to setup speed limit in daloradius. Thanks

                1 Reply Last reply Reply Quote 0
                • E
                  econst last edited by

                  @edmond
                  Sorry for the delayed response, and it seems you have got it working now. I was going to suggest the same thing about the MPD dictionary that needs to be added. Aside from that you need to add "acct-interim-interval" in your profiles in daloradius as a "reply attribute" as per this post: https://forum.netgate.com/post/933184

                  E 1 Reply Last reply Reply Quote 0
                  • E
                    edmond last edited by

                    Are you using freeradius inside pfsense and daloradius installed on different server if so how did you connect daloradius with freeradius in pfsense

                    1 Reply Last reply Reply Quote 0
                    • E
                      edmond @econst last edited by

                      @econst am i on the right direction, what do i need to put on the value ?daloradius.png

                      1 Reply Last reply Reply Quote 0
                      • E
                        econst last edited by

                        @edmond

                        I am just using PfSense for the PPPoE part. I have an external Freeradius server runnning on Ubuntu 18.04.

                        You need to add the dictionary as per the "redmine" link in a post before this one.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post

                        Products

                        • Platform Overview
                        • TNSR
                        • pfSense Plus
                        • Appliances

                        Services

                        • Training
                        • Professional Services

                        Support

                        • Subscription Plans
                        • Contact Support
                        • Product Lifecycle
                        • Documentation

                        News

                        • Media Coverage
                        • Press
                        • Events

                        Resources

                        • Blog
                        • FAQ
                        • Find a Partner
                        • Resource Library
                        • Security Information

                        Company

                        • About Us
                        • Careers
                        • Partners
                        • Contact Us
                        • Legal
                        Our Mission

                        We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                        Subscribe to our Newsletter

                        Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                        © 2021 Rubicon Communications, LLC | Privacy Policy