joeyconcrete
join:2004-10-10
| Re: Enforcing Bandwidth caps (quotas) For anybody who's interested I found two relevant RFCs.
RFC 3576 - Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
RFC 2882 - Network Access Servers Requirements: Extended RADIUS Practices
These refer to "Disconnect Messages" and "Change-of-Authorization Messages (CoA)". To basically allows a RADIUS server to disconnect an active session by sending a specially formed packet to the Access server. Certain Cisco device support this (Cisco called it Ping of Disconnect, POD) and I 'think' other vendors do (Chillispot does for instance.
Using this its relatively easy to write a script which monitors the RADIUS accounting-database, when a quota is reached the message can be sent to the NAS. |
