[Chilli] coova - freeradius connection problem

[Luis Ferreira]

Hi everyone,

 

In our setup, we (as many others) are using ADSL routers for internet. 

For centralization purposes , I've got a central Radius server, serving
requests from several NAS.

For reliability purposes, I've configured a VPN to pass the requests more
efficiently and reliably (VPN on TCP mode).

 

The problem I'm experience is that when ADSL is disconnected (every 18
hours, the connection is reseted by our ISP or if there is a failure), in
the time that chilli cannot connect to freeradius, online users get stuck (
chilli fail to send accounting info to radius), and that causes erratic
behavior on the account, like cannot login sometime after,  mysql radacct
shows zero bytes of traffic or no change on the actual traffic.

 

One of the things that I've done was creating a script to zap stalled
accounts on radius (checking accounting packets and terminating with radzap,
if disconnect packet is not enough). That is good enough to unlock the
account on radius, but not on chilli.

 

The problem is on chilli because if I try to login on other NAS, the account
works perfectly, so the supposed radius reply "User Already logged in" only
happen on the erratic NAS.

 

The only real option that I have to restart chilli to kill those sessions
and do a clean start.

 

Is there any toughts on how to fix this or to debug it further?

 

This is quite annoying, since there is almost every single day locked
accounts, and my solution has been restart chilli in the morning on a daily
basis.

 

Regards,

Luis Ferreira

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.coova.org/pipermail/chilli/attachments/20140111/96936f28/attachment.html>