On Fri, 2004-09-10 at 15:34, Brian Sumpter wrote: > Currently, I have the Authorization Lifetime set to 0 (disable), and the > Accounting Inactivity Timer set to 60 minutes. I'm not sure what would > be best for these settings. What do others find the most useful here?
See docs/misc-nas. If you're not using the 2.4.11 firmware, it won't let you set anything less than 2 hours for authorization lifetime. I personally set the autz lifetime to 15 minutes to force reauth of the users and leave the inactivity timer at the default 5 minutes. The autz lifetime isn't as much of a deal on the Proxims since they have a rekeying interval as well. So, you can set the rekeying interval, and the AP will continue to provide dynamic keys without forcing reauthentication. I set the autz lifetime to that, though, because there are times when I need to block people (viruses tearing up the network and such), so I use the reauth sequence to catch them and take them off the network. -- --Mike ----------------------------------- Michael Griego Wireless LAN Project Manager The University of Texas at Dallas - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
