RADIUS Sessions – Monitor and Disconnect Active Network Sessions
Overview
Section titled “Overview”The RADIUS Sessions page provides real-time monitoring of all RADIUS accounting sessions tracked by MideyeServer. The page automatically polls the server every 3 seconds, giving administrators a live view of active network sessions, session durations, and connection states.
Administrators can filter sessions by username, toggle between all sessions and ongoing-only views, and disconnect active sessions when necessary — for example, to force a user to re-authenticate or to terminate a compromised session. The ongoing session counter at the top of the page provides an instant count of currently active connections.
Access & Permissions
Section titled “Access & Permissions”Required Role: ROOT, SUPER_ADMIN, ADMIN, or OPERATOR
Navigation: Home → Logs → RADIUS Sessions
| Role | View Sessions | Disconnect Session |
|---|---|---|
| ROOT | ✅ | ✅ |
| SUPER_ADMIN | ✅ | ✅ |
| ADMIN | ✅ | ✅ |
| OPERATOR | ✅ | ❌ |
Features & Configuration
Section titled “Features & Configuration”Real-Time Session Monitoring
Section titled “Real-Time Session Monitoring”The data grid automatically refreshes every 3 seconds via server polling, providing a near-real-time view of RADIUS accounting sessions. The ongoing session count also polls at the same interval.
| Column | Default Visible | Hideable | Description |
|---|---|---|---|
| Start Time | ✅ | Yes | When the session began |
| Username | ✅ | No | The authenticated user (always visible) |
| Session ID | ✅ | Yes | RADIUS Acct-Session-Id |
| RADIUS Client | ✅ | Yes | NAS device that initiated the session |
| Assisted Login Session ID | ❌ (hidden) | Yes | Session handle for assisted login sessions |
| Last Update Time | ❌ (hidden) | Yes | Most recent accounting update |
| Stop Time | ✅ | Yes | When the session ended (empty for ongoing) |
| Termination Cause | ✅ | Yes | Reason the session was terminated |
| Action | ✅ | No | Disconnect button (admin only, when applicable) |
Default sort order: Start Time descending (newest first). DataGrid density is set to compact for efficient space utilization.
Ongoing Session Count
Section titled “Ongoing Session Count”Displayed above the data grid: “Number of ongoing sessions: N” — a count of sessions that have not yet received a stop event. This counter updates every 3 seconds.
Filtering Sessions
Section titled “Filtering Sessions”Inline filter controls are displayed directly above the data grid:
| Filter | Type | Description |
|---|---|---|
| Username | Text input | Search by username (debounced 500ms) |
| Show Ongoing Sessions | Checkbox | When checked, only shows sessions without a stop time |
Disconnecting a Session
Section titled “Disconnecting a Session”Administrator users (ROOT, SUPER_ADMIN, ADMIN) can disconnect active sessions directly from the data grid. The disconnect button appears as a stop icon in the Action column.
Disconnect button visibility requirements:
- Current user has an admin role
- The session supports Disconnect-Messages (
supportDm= true) - The session is ongoing (no stop time recorded)
Disconnect Dialog:
- Confirmation: “Are you sure you want to disconnect the RADIUS session with username
[username]and session ID[sessionId]?” - On confirmation, a RADIUS Disconnect-Message is sent to the NAS.
- Success message: “Successfully sent RADIUS session disconnect request, waiting for session to stop”
Field Reference
Section titled “Field Reference”| Field Name | Type | Required | Description |
|---|---|---|---|
| username | String | Yes | Authenticated user identity |
| accountingSessionId | String | Yes | Unique RADIUS accounting session identifier |
| radiusClientName | String | No | Name of the NAS device |
| accountingStartTime | ZonedDateTime | No | Session start timestamp |
| lastAccountingUpdateTime | ZonedDateTime | No | Most recent interim accounting update |
| accountingStopTime | ZonedDateTime | No | Session end timestamp (null for ongoing sessions) |
| sessionHandle | String | No | Assisted login session correlation ID |
| supportDm | Boolean | Yes | Whether the NAS supports Disconnect-Messages |
| terminationCause | String | No | Reason for session termination (empty default) |
Actions
Section titled “Actions”Filter by Username
Section titled “Filter by Username”Purpose: Find sessions for a specific user. Steps: Enter a username in the filter text field. Result: After a 500ms debounce, the data grid updates to show only matching sessions.
Toggle Ongoing Sessions
Section titled “Toggle Ongoing Sessions”Purpose: View only currently active sessions. Steps: Check the “Show Ongoing Sessions” checkbox. Result: The data grid filters to show only sessions without a stop time.
Disconnect Session
Section titled “Disconnect Session”Purpose: Terminate an active RADIUS session by sending a Disconnect-Message to the NAS. Prerequisites:
- Admin role (ROOT, SUPER_ADMIN, or ADMIN)
- Session must be ongoing (no stop time)
- NAS must support Disconnect-Messages (
supportDm= true)
Steps:
- Locate the active session in the data grid.
- Click the stop icon in the Action column.
- Confirm the disconnect in the dialog.
Result: A Disconnect-Message is sent to the NAS. The session should receive a stop event within a few seconds if the NAS processes the request successfully.
Common Use Cases
Section titled “Common Use Cases”Monitoring Active User Sessions
Section titled “Monitoring Active User Sessions”- Check the “Show Ongoing Sessions” checkbox to see only active sessions.
- Review the ongoing session count for current connection volume.
- The page auto-refreshes every 3 seconds — no manual refresh needed.
Force-Disconnecting a Compromised Session
Section titled “Force-Disconnecting a Compromised Session”- Filter by the compromised user’s username.
- Identify the active session(s).
- Click the disconnect button and confirm.
- Monitor the session to verify it receives a stop event.
- Consider locking the user account or creating a filter rule to prevent re-authentication.
Verifying NAS Accounting Configuration
Section titled “Verifying NAS Accounting Configuration”- View all sessions without filters.
- Verify that sessions from each NAS device appear with correct start times and session IDs.
- Check that stopped sessions show appropriate termination causes.
- Missing sessions may indicate accounting configuration issues on the NAS device.
Troubleshooting
Section titled “Troubleshooting”| Issue | Possible Cause | Resolution |
|---|---|---|
| No sessions appear | No accounting data received from NAS devices | Verify RADIUS accounting is enabled on your NAS devices and pointing to MideyeServer |
| Disconnect button not visible | Session doesn’t support DM, isn’t ongoing, or user lacks admin role | Verify all three conditions: admin role, ongoing session, supportDm is true |
| Disconnect sent but session remains active | NAS did not honor the Disconnect-Message | Not all NAS devices support RFC 3576/5176; check NAS compatibility |
| Sessions show but no stop times | NAS not sending accounting stop packets | Configure the NAS to send Accounting-Stop packets |
Related Pages
Section titled “Related Pages”- RADIUS Clients — Configure NAS devices and their accounting server associations
- RADIUS Servers — Manage RADIUS server instances that process accounting requests
- Accounting — View aggregated accounting data with filtering and export capabilities
- Authentication Logs — Correlate session data with authentication events