6 Manual management of L3-connected BRAS authorization status

To set the subscriber authorization status manually you can use the fdpi_ctrl utility.

Setting the "authorized" authorization status (equivalent of Access-Accept)

fdpi_ctrl load --auth=1 --ip=192.168.10.1
# An analogue for IPv6
fdpi_ctrl load --auth=1 --ip=2001:dead::/64

Setting the "unauthorized" authorization status (equivalent of Access-Accept)

fdpi_ctrl load --auth=0 --ip=192.168.10.1
# An analogue for IPv6
fdpi_ctrl load --auth=0 --ip=2001:dead::/64

To view the current subscriber authorization status

fdpi_ctrl list --auth --ip=192.168.10.1
fdpi_ctrl list --auth --ip=2001:dead::/64

To reset the subscriber authorization status

fdpi_ctrl del --auth --ip=192.168.10.1
fdpi_ctrl del --auth --ip=2001:dead::/64

Once the the status is reset, the first packet from the subscriber will results in an authorization request through the RADIUS server.

When setting the authorization status, you can set the time (in seconds) during which this status will be valid:

Setting the "authorized" authorization status for 10 minutes

fdpi_ctrl load --auth=1 --ip=192.168.10.1 --timeout=600

By default, the authorization lifetime is set by the auth_expired_timeout parameter.