This is an old revision of the document!
6 Manual management of L3-connected BRAS authorization status
To set the subscriber authorization status manually you can use the fdpi_ctrl utility.
Setting the "authorized" authorization status (equivalent of Access-Accept)
fdpi_ctrl load --auth=1 --ip=192.168.10.1 # An analogue for IPv6 fdpi_ctrl load --auth=1 --ip=2001:dead::/64
Setting the "unauthorized" authorization status (equivalent of Access-Accept)
fdpi_ctrl load --auth=0 --ip=192.168.10.1 # An analogue for IPv6 fdpi_ctrl load --auth=0 --ip=2001:dead::/64
To view the current subscriber authorization status
fdpi_ctrl list --auth --ip=192.168.10.1 fdpi_ctrl list --auth --ip=2001:dead::/64
To reset the subscriber authorization status
fdpi_ctrl del --auth --ip=192.168.10.1 fdpi_ctrl del --auth --ip=2001:dead::/64
Once the the status is reset, the first packet from the subscriber will results in an authorization request through the RADIUS server.
When setting the authorization status, you can set the time (in seconds) during which this status will be valid:
Setting the "authorized" authorization status for 10 minutes
fdpi_ctrl load --auth=1 --ip=192.168.10.1 --timeout=600
By default, the authorization lifetime is set by the auth_expired_timeout parameter.