[Chilli] Correct chilli_query usage for resetting client's session, directing them back to portal

[Xabier Oneca -- xOneca]

Hello Ben,

2015-02-13 23:55 GMT+01:00 Ben West <ben at gowasabi.net>:
> I am curious what is the correct "chilli_query" invocation to reset a
> particular client's authorized session and force them back to the portal,
> without affecting other clients on that same AP.
>
> This is the usage info which chilli_query reports:
>
> [...]
>
> Say this the active session list (anonymized):
>
> root at Openwrt:~# chilli_query list
> 50-55-27-XX-XX-XX 101.2.233.37 dnat 54de762f00000007 0 50-55-27-XX-XX-XX
> 0/7200 0/3600 0/0 0/0 0 1 0/0 0/0 http://domain.com
> 10-68-3F-XX-XX-XX 101.2.233.40 pass 54de742800000006 1 guest 2140/7200
> 1/3600 1155289/0 5056945/0 524288000 1 0%/384000 0%/1000000
> http://somewhere.com
> C8-3A-35-XX-XX-XX 101.2.233.27 pass 54de7e9a00000003 1 guest 113/7200 0/3600
> 310508/0 3970351/0 524288000 1 2%/384000 32%/1000000
> http://somewhereelse.com
> CC-D2-9B-XX-XX-XX 101.2.233.25 dnat 54de3ed700000004 0 CC-D2-9B-XX-XX-XX
> 0/7200 0/3600 0/0 0/0 0 1 0/0 0/0 http://nowhere.com
> DE-9F-DB-XX-XX-XX 101.2.233.2 dnat 54ddcb2300000002 0 DE-9F-DB-XX-XX-XX
> 0/7200 0/3600 0/0 0/0 0 1 0/0 0/0 -
>
> To reset the session for client at MAC address C8-3A-35-XX-XX-XX, forcing
> him to log back into the captive portal again as user "guest," would this be
> correct usage?
>
> # chilli_query logoff C8-3A-35-XX-XX-XX
>
> chilli_query has the commands logout, logoff, block, and drop, and I'm
> having difficulty locating documentation about precisely what those commands
> do.

The commands 'logout' and 'logoff' are synonyms. The same is for
'block' and 'drop'.

To reset sessions I used to use 'logoff'. It terminates the user
session with cause RADIUS_TERMINATE_CAUSE_ADMIN_RESET.

Not sure what 'block' does. I think it denies access indefinitely
(even to the UAM).

HTH,

Xabier Oneca_,,_