Hello David -
On Tue, 21 Dec 1999, David Lloyd wrote:
> Hello, I've got a 3COM box that uses MPIP to synchronize the multilink
> information between two router cards. My problem is that whenever someone
> connects one channel into each card, an accounting entry is made that
> looks like a regular accounting entry, except the NAS-Port-Type is set to
> 'Virtual'.
>
> This means that if someone connects, one channel into each box, the
> session database will record three entries instead of two!
>
> Is there a way where I can selectively ignore any accounting request in
> which the NAS-Port-Type is Virtual, or better still, can I simply avoid
> inserting that entry into my session database? Or can I set CountQuery to
> somehow ignore those?
>
I will need to see your configuration file, but this can be done by defining a
second session database and using it for the offending packets. Something like
this:
# this is your existing session database
<SessionDatabase SQL>
....
</SessionDatabase>
# add this
<SessionDatabase INTERNAL>
Identifier InMemory
</SessionDatabase>
# then this
<Handler Request-Type = Accounting-Request, NAS_Port_Type = Virtual>
SessionDatabase InMemory
<AuthBy FILE>
Filename %D/virtual-users
</AuthBy>
</Handler>
# then the rest of your configuration
....
# virtual-users file contains this
(should never be used, but this is for security)
Virtual Auth-Type = Reject
The usual caveats apply regarding Realms and Handlers. Also note that the above
configuration uses the Request-Type check item which is implemented in a patch
to Radiator 2.14.1. And in addition the <SessionDatabase INTERNAL> must follow
your existing session database to work properly (there is a fix for
the Identifier coming).
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
