idle timeout questions

[Hendrik Pahl]

Hi *,

we're evaluating radius for authentication and logging purposes in a
multi-homed environment. Due to legal issues it is necessary to log
_and_ to really timeout sessions which are idle - looks like radius
would be the solution for us. Now we are thinking about the technical
realization of that issue - what does radius server do to detect a
timeout, let's say 10 minutes? Is the server collecting traffic
statistics on the interface(s) and decides depending on those stats what
to do? Or how is this implemented?

Thanks in advance,
hendrik

Freundliche Grüße,

i.A. Hendrik Pahl
Systemingenieur
--
LWsystems GmbH & Co. KG  ++  http://www.lw-systems.de/impressum
Tel: [phone] / 5556  ++  Fax: [phone]

Ihr Spezialist für Linux, Open Source & IT-Sicherheit

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

LWsystems GmbH & Co. KG
Sitz der Gesellschaft: Tegelerweg 11, 49186 Bad Iburg
Telefon [phone]
Telefax [phone]
Handelsregister: Amtsgericht Osnabrück, HRA 110668
USt.-ID-Nr. DE244573220

Persönlich haftende Gesellschafterin: LWsystems Verwaltungs GmbH
Sitz der Gesellschaft: Tegelerweg 11, 49186 Bad Iburg
Handelsregister: Amtsgericht Osnabrück, HRB 111163

Geschäftsführer:
Dipl.-Ing. Ansgar H. Licher, Bad Iburg
Dipl.-Ing. Martin Werthmöller, Ibbenbüren

Für weitere Firmendetails zu LWsystems siehe /
For further company details please look at:
http://www.lw-systems.de/impressum

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++




_______________________________________________
Help-gnu-radius mailing list
Help-gnu-radius@...
http://lists.gnu.org/mailman/listinfo/help-gnu-radius

[Sergey Poznyakoff-2]

Hi Hendrik,

> Now we are thinking about the technical
> realization of that issue - what does radius server do to detect a
> timeout, let's say 10 minutes? Is the server collecting traffic
> statistics on the interface(s) and decides depending on those stats
> what to do?

Radius does not collect any data from interfaces. It's only purpose
is to receive requests from network access servers, process them and
answer them back. Once the request is answered, Radius has no way
of further control over the NAS or the session.

Session timeouts are normally controlled by returnint the
Session-Timeout attribute in the answer to Access-Requests. Idle
timeouts are set by returning the Idle-Timeout attribute in the same
response. Additionally, particular NAS vendors may supply their own
vendor attributes to control these.

The GNU Radius Manual will supply a more detailed information on the
subject. It is avialable online in various formats from
http://www.gnu.org/software/radius/manual.

Regards,
Sergey


_______________________________________________
Help-gnu-radius mailing list
Help-gnu-radius@...
http://lists.gnu.org/mailman/listinfo/help-gnu-radius