How to Disconnect Hotspot Users via RADIUS CoA on Teltonika RUTOS Devices?

NETWORKING SOLUTIONS
1

Hello,​

I’m currently working with Teltonika routers running RUTOS and have successfully set up a Hotspot using an external RADIUS server for user authentication

My goal is to implement Change of Authorization (CoA) functionality to disconnect users remotely via the RADIUS server.​

I’ve noticed that CoovaChilli, which is utilized for the Hotspot service, includes options related to CoA, such as:​

–coaport=INT Radius disconnect port to listen to
(default=`0’)
–coanoipcheck Allow radius disconnect from any IP
(default=off)

However, I haven’t found clear documentation or guidance on how to enable or configure CoA support within the RUTOS interface.​

  1. Does RUTOS support CoA for disconnecting Hotspot users via an external RADIUS server?​
  2. If so, what are the steps to configure this functionality?​
  3. Are there any specific settings or considerations within the RUTOS interface or configuration files to enable CoA support?​

Any insights, documentation, or guidance on this matter would be greatly appreciated.​

Thank you in advance for your assistance!

3

Hello,

Unfortunately, CoA functionality is not currently supported on our devices. However, our RnD team is actively analyzing the possibility of implementing this feature in the future.

I will keep you informed of any updates regarding this.

Thank you for your understanding.

Best regards,

4

RUTOS doesn’t officially support it, but you can use it by manually editing coova-chilli configuration. Edit file found in /etc/config/chilli.

Add your CoA port as per coova-chilli documentation:

coaport 'port'

UDP port to listen to for accepting radius disconnect requests.

coanoipcheck '1'

If this option is given no check is performed on the source IP address of radius disconnect requests. Otherwise it is checked that radius disconnect requests originate from radiusserver1 or radiusserver2.

After editing the file restart the service:

/etc/init.d/chilli restart

CoA should be working on the specified port.

1 Like