Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Radius attributes concern

    Scheduled Pinned Locked Moved General pfSense Questions
    11 Posts 2 Posters 952 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      manoj11308
      last edited by

      Our current RADIUS server relies on the inclusion of the Standard RADIUS attribute 25-Class.

      While the RADIUS server includes the Class attribute in the Access-Accept messages and anticipates receiving the same attribute in all Accounting Requests, we have observed that the Class attribute is not present in the Accounting-Request.

      We need confirmation regarding the support for this attribute. If it is supported, we also seek guidance on the steps to enable it.

      1 Reply Last reply Reply Quote 0
      • jimpJ jimp moved this topic from Problems Installing or Upgrading pfSense Software on
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        How are you intending to use this? With captive portal?

        M 1 Reply Last reply Reply Quote 0
        • M
          manoj11308 @stephenw10
          last edited by

          @stephenw10

          Yes, for captive portal.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, so the server returns a unique value for each client that must be in each accounting update for that client? Or just something fixed?

            M 1 Reply Last reply Reply Quote 0
            • M
              manoj11308 @stephenw10
              last edited by

              @stephenw10

              Yes, first part for each access accepts, the value shall be different, and we expect unmodified value back in accounting.

              M 1 Reply Last reply Reply Quote 0
              • M
                manoj11308 @manoj11308
                last edited by

                @stephenw10

                Please update.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Did you test this and it didn't pass that? I have no easy way to test it here, Freeradius doesn't enable it by default.

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    manoj11308 @stephenw10
                    last edited by

                    @stephenw10

                    I am using our external radius server, not using Pfsense free radius.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Right but I'm testing with Freeradius, I can't replicate that test easily.

                      What happens when you test against your server?

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        manoj11308 @stephenw10
                        last edited by

                        @stephenw10

                        While the RADIUS server includes the Class attribute in the Access-Accept messages and anticipates receiving the same attribute in all Accounting Requests, we have observed that the Class attribute is not present in the Accounting-Request.

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Hmm, well there's no config option for that. Some coding would be required it looks like.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.