Radius Throttelling on Captive Portal

Bonline

Hi everyone !

(sorry for poor English)

Im looking for help regarding bandwidth throttle on clients connected to the captive portal and authenticated by a freeradius server.

What we tried:

1/ Enable "per User Bandw.. restriction"

Specify rates

It works
But : We want dynamic throtlling
And : It seems to cause an issue, if the radius account has already a limiting rate in itself.

No data exchange for the client in this case.

2/ Enable "per user Bandw …"

No rates specified

It doesnt work
On accounts with radius specified limit rate, and on radius accounts with unlimited rate..

Strange

So I have no solution, to limit bandwidth with radius

Only everyone limiting through captive portal conf

thats bad. :)
How can we throttle non paying clients to 128K ? :))

(ironic)

I assume, we missed something,
so thank you in advance for helping me

Best regards
Florian

Ps: Here running PF 2

Nachtfalke

Hi,

did this help you?
http://doc.pfsense.org/index.php/FreeRADIUS_2.x_package#HOW-TO_-FreeRADIUS.2B_Captive_Portal_configuration
Are you using the freeradius2 package or another RADIUS server ?

Bonline

HI nachtfalke !

thanks for replying me..

I will look your link, some infos are interesting inside, to adjust our conf.

but I forget to mention :

Our freeradius (v2) is outside the pfsense box

(outside … our WANS)

When an access accept is sent, i can see the into the freeradius log the bw limit (over radiusd -X command)

if I understand,

We have to put "Enable per user bw limit" and then leave the values empty or to zéro ?

this doesnt work

Login completes, but then no traffic is allowed through the pf CP

b

Nachtfalke

Is your RADIUS sending the correct attributes:


WISPr-Bandwidth-Max-Down
WISPr-Bandwidth-Max-Up

These attributes are Reply-attributes and must to be sent from RADIUS to CP.

As far as I know it works this way:
If you put any value on CP page then CP will use this value UNTIL there is another value sent from RADIUS.

Bonline

HI thank you again for replying me :)

so did I unterstood it too.

would you know where I can check this into freeradius?

Best regards

Nachtfalke

@Bonline:

HI thank you again for replying me :)

so did I unterstood it too.

would you know where I can check this into freeradius?

Best regards

That depends on where you store the users. If you store them in the "users" file in ../raddb/ folder then it would look like this:


"Testuser" Cleartext-Password := "testpassword"
	WISPr-Bandwidth-Max-Up := 524288,
	WISPr-Bandwidth-Max-Down := 2097152

If you store it in a MySQL database - I do not use any database - this would be probably stored in any "radreply" table.

If you are running freeradius in debug mode "radiusd -X" then you can check this if a user connects then the radius server must answer with the two attributes from above. If the server does not send these attributes you must configure your freeradius server.