[原创]freeradius2.2.6的sqlcounter的用法，实现累计时长或流量控制

一、累计时长控制 1、radiusd.conf配置文件配置 modules{ } 中开放 counter.conf配置文件 modules { $INCLUDE sql/mysql/counter.conf ...some other entries here...

2、sites-enabled/default文件的修改 authorize{ } 在最后增加计数器选项

authorize { ...some entries here... ...some entries here... ...some entries here... ...some entries here...

noresetcounter dailycounter monthlycounter }

3、基于用户的累计时长控制 在radcheck表插入用户时，需要同时插入以下几个记录 INSERT into radcheck (username,  attribute, op, value) VALUES ('Glenn','Max-All-Session' ,':=','54000'); INSERT into radcheck  (username,  attribute, op, value) VALUES (' Glenn','Max-Daily-Session' ,':=','10800'); INSERT into radcheck  (username,  attribute, op, value) VALUES (' Glenn','Max-Monthly-Session' ,':=','10800');

4、基于组的累计时长控制 在radgroupcheck表中，增加组检查信息 INSERT into  radgroupcheck(groupname,  attribute, op, value) VALUES ('normal','Max-All-Session' ,':=','54000'); INSERT into  radgroupcheck (groupname,  attribute, op, value) VALUES (' normal','Max-Daily-Session' ,':=','10800'); INSERT into  radgroupcheck (groupname,  attribute, op, value) VALUES (' normal','Max-Monthly-Session' ,':=','10800'); 在插入用户时，在radusergroup表中管理用户到该组 INSERT INTO radusergroup (username,groupname) VALUES ('Glenn','normal');

二、累计流量控制 1、与时长控制一致，在radiusd.conf中开放 counter.conf modules{ } 中开放 counter.conf配置文件 modules { $INCLUDE sql/mysql/counter.conf ...some other entries here...

2、 在sqlcounter.conf文件末尾添加下面代码  sqlcounter dailytrafficcounter {  counter-name = Daily-Traffic  check-name = Max-Daily-Traffic  reply-name = Daily-Traffic-Limit  sqlmod-inst = sql  key = User-Name  reset = daily  query = "SELECT SUM(acctinputoctets + acctoutputoctets) \                  FROM radacct WHERE username = '%{%k}' AND \                  UNIX_TIMESTAMP(acctstarttime) > '%b'" } sqlcounter monthlytrafficcounter {   counter-name = Monthly-Traffic   check-name = Max-Monthly-Traffic   reply-name = Monthly-Traffic-Limit   sqlmod-inst = sql   key = User-Name   reset = monthly   query = "SELECT SUM(acctinputoctets + acctoutputoctets) \          FROM radacct WHERE UserName='%{%k}' AND  \          UNIX_TIMESTAMP(AcctStartTime) > '%b'" } sqlcounter noresettrafficcounter {   counter-name = All-Traffic   check-name = Max-All-Traffic   reply-name = All-Traffic-Limit   sqlmod-inst = sql   key = User-Name   reset = never   query = "SELECT SUM(acctinputoctets + acctoutputoctets) FROM radacct WHERE UserName='%{%k}'" }

3、sites-enabled/default文件的修改 authorize{ } 在最后增加计数器选项

authorize { ...some entries here... ...some entries here... ...some entries here... ...some entries here...

noresettrafficcounter dailytrafficcounter monthlytrafficcounter }

4、添加字典文件     vim /etc/raddb/dictionary     在文件末尾添加下面几行 ATTRIBUTE       Max-Daily-Traffic       3003    integer ATTRIBUTE        Daily-Traffic-Limit   3004    integer ATTRIBUTE       Max-Monthly-Traffic     3005    integer ATTRIBUTE       Monthly-Traffic-Limit   3006    integer ATTRIBUTE       Max-All-Traffic         3007    integer ATTRIBUTE       All-Traffic-Limit       3008    integer

5、组方式限定用量 INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values("normal", "Max-Daily-Traffic", ":=", "1048576");

INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values(" normal", "Max-Monthly-Traffic", ":=", "1073741824"); INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values(" normal ", "Max-All-Traffic", ":=", "10737418240");

注意：3.0以下版本的freeradius，由于计数器门限变量在代码中是int32，所以限制流量时，最大门限int32的最大值 （ 2147483648 ） ，即2G字节。 因此，可以考虑只按天或按月限制，不要做太长周期的限制