Returning Session and/or Idle timeout in a RADIUS Scenario.

Last modified on 21 Jan, 2021. Revision 6
This might be a requirement when setting up EasyAccess. Since we normally deal with users who uses NPS (Microsoft Network Policy Server) as RADIUS Server where Session and Idle timeout values are sent per default in the RADIUS ACCESS-ACCEPT. In EasyAccess these values are not sent per default and you have to manually specify that those should be returned. Here is how you do that.
Up to date for
EasyAccess 3.2.0
Status OK



Configuring EasyAccess

Go t your RADIUS Scenario under Scenario → Radius in the webui. Go to the “Execution flow” tab and add two PropertyAddVavles with the following configuration:

PropertyAddValve

{
        "name": "PropertyAddValve",
        "config": { 
              "name":"session",
              "value":"30",
              "splitter" : ";"
        }
}

PropertyAddValve

{
        "name": "PropertyAddValve",
        "config": { 
              "name":"idle",
              "value":"30",
              "splitter" : ";"
        }
}




Next go to the Advanced Tab and add the following under Response Attributes:

Related articles

Roaming IKEv2 tunnel setup in cOS Core with XCA CA and FreeRADIUS
10 Mar, 2023 core vpn ikev2 windows radius certificate
User Auth with Active Directory using cOS Core RADIUS/LDAP
24 Apr, 2023 core legacy activedirectory radius userauth
Sending EasyAccess logs to InCenter or a Syslog server
4 May, 2021 easyaccess incenter syslog
cOS Core LDAP auth issues with Microsoft AD servers
11 Apr, 2023 ldap core authentication radius
How to configure passwordless OneTouch authentication
24 Feb, 2021 easyaccess radius saml sso onetouch
Upgrading EasyAccess to PhenixID Authentication Services
16 Aug, 2024 changeme easyaccess phenixid pas
Group membership in FreeRADIUS with cOS Core
6 Apr, 2023 core radius authentication
cOS Core IKEv2 tunnel setup with certificates for iOS clients
5 Apr, 2023 core nps ipsec radius legacy
Radius vs LDAP for authentication
21 Nov, 2022 radius ldap authentication core