Page 1 of 1

Freeradius Port-Limit simultaneous-use

Posted: Thu Apr 24, 2014 3:06 pm
by zhex900
Hi,

I am trying to limit each user to have one session only. Currently, I can login via NAS (MikroTik) through a freeradius server. However simultaneous-use is not working. I have set Simultaneous-Use to 1 in radcheck. Port-Limit to 1 in radreply.

NAS received Port-Limit=1. I can see it in the log. But I can still can log on with the same user on two devices.

Simultaneous-Use is working if I use PAP. radtest works.
#radtest user password 127.0.0.1 100 secret

Any ideas?

Re: Freeradius Port-Limit simultaneous-use

Posted: Sat Apr 26, 2014 6:19 pm
by nerdtron
My problem too. I hope somebody has a solution.

Re: Freeradius Port-Limit simultaneous-use

Posted: Sat Jul 05, 2014 11:30 am
by ropix
I also have some problem.

Re: Freeradius Port-Limit simultaneous-use

Posted: Sat Jul 05, 2014 4:27 pm
by SurferTim
Simultaneous-Use is working if I use PAP. radtest works.
#radtest user password 127.0.0.1 100 secret
FreeRADIUS will never be 127.0.0.1 on the router.

Enable radius logging on your router.
/system logging
add topics=radius,debug action=memory
Try the login again and check your log.

edit: If the username is already logged in, you should get a Access-Reject with a message stating "you are already logged in 1 times".

I haven't mentioned this in a while, so I will here. If you have FreeRADIUS set to store the passwords encrypted in the SQL database, you can't use http-chap as a login-by method, You must use http-pap, or do not store the passwords encrypted in FreeRADIUS.