Hi All,
I am using pfsense as a NAS in a Captive Portal scenario in which AAA
functionality is provided by an external RADIUS Server. Enable interim
updates on pfsense captive portal config page, in order to get regular
updates of users data usage. Performed several tests and analyzing the
Radius Accounting Logs realized that during the same session (for a
specific user), the value of Acct-Output-Octets and Acct-Input-Octets is
not cumulative, as I expected, based on readings about RADIUS interim
update packets.
I noticed this behavor on pfSense-2.0.2, upgraded to 2.0.3 but the issue
persists. I send below, a radacc file from my last experiment. Please note
the values of the above mentioned parameters, decreasing after the 2nd
Accounting update.
Any ideas? Has anyone faced a similar problem?
++++++++++++++++++++++++++++++++++++++++
Wed Aug 7 17:55:44 2013 [Account Start]
NAS-IP-Address = 192.168.170.10
NAS-Identifier = "i9pfw"
User-Name = "5a06r5zf"
Acct-Status-Type = Start
Acct-Authentic = RADIUS
Service-Type = Login-User
NAS-Port-Type = Ethernet
NAS-Port = 22
Acct-Session-Id = "3f3af26ead2d3eaa"
Framed-IP-Address = 172.21.30.41
Called-Station-Id = "192.168.170.10"
Calling-Station-Id = "10:40:f3:d3:7a:6f"
Acct-Unique-Session-Id = "ee7d018eb6537c9a"
Timestamp = 1375890944
Request-Authenticator = Verified
Wed Aug 7 17:56:30 2013 [Interim Update #1]
NAS-IP-Address = 192.168.170.10
NAS-Identifier = "i9pfw"
User-Name = "5a06r5zf"
Acct-Status-Type = Interim-Update
Acct-Session-Time = 45
Acct-Authentic = RADIUS
Service-Type = Login-User
NAS-Port-Type = Ethernet
NAS-Port = 22
Acct-Session-Id = "3f3af26ead2d3eaa"
Framed-IP-Address = 172.21.30.41
Called-Station-Id = "192.168.170.10"
Calling-Station-Id = "10:40:f3:d3:7a:6f"
Acct-Input-Packets = 127
Acct-Input-Octets = 16565
Acct-Input-Gigawords = 0
Acct-Output-Packets = 81
Acct-Output-Octets = 39024
Acct-Output-Gigawords = 0
Acct-Session-Time = 45
Acct-Unique-Session-Id = "ee7d018eb6537c9a"
Timestamp = 1375890990
Request-Authenticator = Verified
Wed Aug 7 17:59:04 2013 [Interim Update #2]
NAS-IP-Address = 192.168.170.10
NAS-Identifier = "i9pfw"
User-Name = "5a06r5zf"
Acct-Status-Type = Interim-Update
Acct-Session-Time = 194
Acct-Authentic = RADIUS
Service-Type = Login-User
NAS-Port-Type = Ethernet
NAS-Port = 22
Acct-Session-Id = "3f3af26ead2d3eaa"
Framed-IP-Address = 172.21.30.41
Called-Station-Id = "192.168.170.10"
Calling-Station-Id = "10:40:f3:d3:7a:6f"
Acct-Input-Packets = 864
Acct-Input-Octets = 101704
Acct-Input-Gigawords = 0
Acct-Output-Packets = 911
Acct-Output-Octets = 1069937
Acct-Output-Gigawords = 0
Acct-Session-Time = 194
Acct-Unique-Session-Id = "ee7d018eb6537c9a"
Timestamp = 1375891144
Request-Authenticator = Verified
Wed Aug 7 18:02:59 2013 [Interim Update #3]
NAS-IP-Address = 192.168.170.10
NAS-Identifier = "i9pfw"
User-Name = "5a06r5zf"
Acct-Status-Type = Interim-Update
Acct-Session-Time = 435
Acct-Authentic = RADIUS
Service-Type = Login-User
NAS-Port-Type = Ethernet
NAS-Port = 22
Acct-Session-Id = "3f3af26ead2d3eaa"
Framed-IP-Address = 172.21.30.41
Called-Station-Id = "192.168.170.10"
Calling-Station-Id = "10:40:f3:d3:7a:6f"
Acct-Input-Packets = 439
Acct-Input-Octets = 61551
Acct-Input-Gigawords = 0
Acct-Output-Packets = 258
Acct-Output-Octets = 128519
Acct-Output-Gigawords = 0
Acct-Session-Time = 435
Acct-Unique-Session-Id = "ee7d018eb6537c9a"
Timestamp = 1375891379
Request-Authenticator = Verified
Wed Aug 7 18:06:54 2013 [Interim Update #4]
NAS-IP-Address = 192.168.170.10
NAS-Identifier = "i9pfw"
User-Name = "5a06r5zf"
Acct-Status-Type = Interim-Update
Acct-Session-Time = 669
Acct-Authentic = RADIUS
Service-Type = Login-User
NAS-Port-Type = Ethernet
NAS-Port = 22
Acct-Session-Id = "3f3af26ead2d3eaa"
Framed-IP-Address = 172.21.30.41
Called-Station-Id = "192.168.170.10"
Calling-Station-Id = "10:40:f3:d3:7a:6f"
Acct-Input-Packets = 131
Acct-Input-Octets = 14142
Acct-Input-Gigawords = 0
Acct-Output-Packets = 31
Acct-Output-Octets = 4893
Acct-Output-Gigawords = 0
Acct-Session-Time = 669
Acct-Unique-Session-Id = "ee7d018eb6537c9a"
Timestamp = 1375891614
Request-Authenticator = Verified
++++++++++++++++++++++++++++++++++++++++
Thank you.
Regards
--
Eneas
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list
