Hi,
I use FreeBSD 7.0 and have mpd as PPPoE Server & FreeRADIUS & PGSQL
succesfully running.
My goal now is it to shrink down the Bandwidth for each user with the
help of IPFW and Dummynet which is supported by mpd and shouldn't be
that big of a deal.
That's how my /usr/local/etc/raddb/users looks like:
###############################################
test User-Password == "testpasswd"
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 1.2.3.4,
Framed-IP-Netmask = 255.255.255.255,
Framed-Routing = Broadcast-Listen,
Framed-Filter-Id = "std.ppp",
Framed-MTU = 1492,
Framed-Compression = Van-Jacobsen-TCP-IP,
mpd-table += "1=11.1.11.1",
mpd-table += "1=1.2.3.4",
mpd-pipe += "1=bw 20Kbyte/s",
mpd-pipe += "5=bw 10Kbyte/s",
mpd-rule += "1=pipe %p1 all from any to table\(%t1\) in",
mpd-rule += "2=pipe %p5 all from table\(%t1\) to any out",
mpd-rule += "100=allow all from any to any",
[...]
###############################################
The last few lines are responsible for limiting the bandwidth but those
brackets causing trouble because FreeRADIUS doesn't send it like that to
mpd5.
-----------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------------
... somebody told me:
IPFW rules are operated using shell+ipfw execution.
So you should add slashes before shell special chars, like "(" or ")":
mpd-rule += "1=pipe %p1 all from any to table\(%t1\) in",
mpd-rule += "2=pipe %p5 all from table\(%t1\) to any out",
PS: you RADIUS configuration syntax may require additional slashing for
that slashes. :)
[...]
Enable 'log +radius2' in mpd and make sure that rules coming to mpd with
that slashes added.
If there will be no slashes, then you RADIUS config strips them and you
should add slashes for slashes.
-----------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------------
here is a part of mpd5's log to have look how RADIUS sending those
attributes to mpd5:
###############################################
[...]
[rl0-3] RADIUS: RadiusGetParams: RAD_MPD_RULE: 1=pipe %p1 all from any
to table\(%t1) in
[rl0-3] RADIUS: RadiusGetParams: RAD_MPD_RULE: 2=pipe %p5 all from
table\(%t1) to any out
[...]
###############################################
^^ ... so you see .. one of that slashes is missed ... BUT how do I get
those two Lines:
[...]
[rl0-3] RADIUS: RadiusGetParams: RAD_MPD_RULE: 1=pipe %p1 all from any
to table\(%t1) in
[rl0-3] RADIUS: RadiusGetParams: RAD_MPD_RULE: 2=pipe %p5 all from
table\(%t1) to any out
[...]
looking like they do look in the /usr/local/etc/raddb/users ?
Thank you
Regards,
Leander
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
