[原創]freeradius2.2.6的sqlcounter的用法,實現累計時長或流量控制
一、累計時長控制
1、radiusd.conf配置文件配置
modules{ } 中開放counter.conf配置文件
modules {
$INCLUDE sql/mysql/counter.conf
...some other entries here...
2、sites-enabled/default文件的修改
authorize{ } 在最後增加計數器選項
authorize {
...some entries here...
...some entries here...
...some entries here...
...some entries here...
noresetcounter
dailycounter
monthlycounter
}
3、基於用戶的累計時長控制
在radcheck表插入用戶時,需要同時插入以下幾個記錄
INSERT into radcheck (username, attribute, op, value) VALUES ('Glenn','Max-All-Session',':=','54000');
INSERT into radcheck (username, attribute, op, value) VALUES ('Glenn','Max-Daily-Session',':=','10800');
INSERT into radcheck (username, attribute, op, value) VALUES ('Glenn','Max-Monthly-Session',':=','10800');
4、基於組的累計時長控制
在radgroupcheck表中,增加組檢查信息
INSERT into radgroupcheck(groupname,
attribute, op, value) VALUES ('normal','Max-All-Session',':=','54000');
INSERT into radgroupcheck(groupname, attribute, op, value) VALUES
('normal','Max-Daily-Session',':=','10800');
INSERT into radgroupcheck(groupname,
attribute, op, value) VALUES ('normal','Max-Monthly-Session',':=','10800');
在插入用戶時,在radusergroup表中管理用戶到該組
二、累計流量控制
1、與時長控制一致,在radiusd.conf中開放counter.conf
modules{ } 中開放counter.conf配置文件
modules {
$INCLUDE sql/mysql/counter.conf
...some other entries here...
2、在sqlcounter.conf文件末尾添加下面代碼
sqlcounter dailytrafficcounter {
counter-name = Daily-Traffic
check-name = Max-Daily-Traffic
reply-name = Daily-Traffic-Limit
sqlmod-inst = sql
key = User-Name
reset = daily
query = "SELECT SUM(acctinputoctets + acctoutputoctets) \
FROM radacct WHERE username = '%{%k}' AND \
UNIX_TIMESTAMP(acctstarttime) > '%b'"
}
sqlcounter monthlytrafficcounter {
counter-name = Monthly-Traffic
check-name = Max-Monthly-Traffic
reply-name = Monthly-Traffic-Limit
sqlmod-inst = sql
key = User-Name
reset = monthly
query = "SELECT SUM(acctinputoctets + acctoutputoctets) \
FROM radacct WHERE UserName='%{%k}' AND \
UNIX_TIMESTAMP(AcctStartTime) > '%b'"
}
sqlcounter noresettrafficcounter {
counter-name = All-Traffic
check-name = Max-All-Traffic
reply-name = All-Traffic-Limit
sqlmod-inst = sql
key = User-Name
reset = never
query = "SELECT SUM(acctinputoctets + acctoutputoctets) FROM radacct WHERE UserName='%{%k}'"
}
3、sites-enabled/default文件的修改
authorize{ } 在最後增加計數器選項
authorize {
...some entries here...
...some entries here...
...some entries here...
...some entries here...
noresettrafficcounter
dailytrafficcounter
monthlytrafficcounter
}
4、添加字典文件
vim /etc/raddb/dictionary
在文件末尾添加下面幾行
ATTRIBUTE Max-Daily-Traffic 3003 integer
ATTRIBUTE Daily-Traffic-Limit 3004 integer
ATTRIBUTE Max-Monthly-Traffic 3005 integer
ATTRIBUTE Monthly-Traffic-Limit 3006 integer
ATTRIBUTE Max-All-Traffic 3007 integer
ATTRIBUTE All-Traffic-Limit 3008 integer
5、組方式限定用量
INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values("normal", "Max-Daily-Traffic", ":=", "1048576");
INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values("normal", "Max-Monthly-Traffic", ":=", "1073741824");
INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values("normal", "Max-All-Traffic", ":=", "10737418240");
注意:3.0以下版本的freeradius,由於計數器門限變量在代碼中是int32,所以限制流量時,最大門限int32的最大值
(2147483648),即2G字節。
因此,可以考慮只按天或按月限制,不要做太長週期的限制
發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.