RADIUS Sessions – Monitor and Disconnect Active Network Sessions

Overview

The RADIUS Sessions page provides real-time monitoring of all RADIUS accounting sessions tracked by MideyeServer. The page automatically polls the server every 3 seconds, giving administrators a live view of active network sessions, session durations, and connection states.

Administrators can filter sessions by username, toggle between all sessions and ongoing-only views, and disconnect active sessions when necessary — for example, to force a user to re-authenticate or to terminate a compromised session. The ongoing session counter at the top of the page provides an instant count of currently active connections.

Access & Permissions

Required Role: ROOT, SUPER_ADMIN, ADMIN, or OPERATOR

Navigation: Home → Logs → RADIUS Sessions

| Role | View Sessions | Disconnect Session | |------|--------------|-------------------| | ROOT | ✅ | ✅ | | SUPER_ADMIN | ✅ | ✅ | | ADMIN | ✅ | ✅ | | OPERATOR | ✅ | ❌ |

Features & Configuration

Real-Time Session Monitoring

The data grid automatically refreshes every 3 seconds via server polling, providing a near-real-time view of RADIUS accounting sessions. The ongoing session count also polls at the same interval.

| Column | Default Visible | Hideable | Description | |--------|----------------|----------|-------------| | Start Time | ✅ | Yes | When the session began | | Username | ✅ | No | The authenticated user (always visible) | | Session ID | ✅ | Yes | RADIUS Acct-Session-Id | | RADIUS Client | ✅ | Yes | NAS device that initiated the session | | Assisted Login Session ID | ❌ (hidden) | Yes | Session handle for assisted login sessions | | Last Update Time | ❌ (hidden) | Yes | Most recent accounting update | | Stop Time | ✅ | Yes | When the session ended (empty for ongoing) | | Termination Cause | ✅ | Yes | Reason the session was terminated | | Action | ✅ | No | Disconnect button (admin only, when applicable) |

Default sort order: Start Time descending (newest first). DataGrid density is set to compact for efficient space utilization.

Ongoing Session Count

Displayed above the data grid: "Number of ongoing sessions: N" — a count of sessions that have not yet received a stop event. This counter updates every 3 seconds.

Filtering Sessions

Inline filter controls are displayed directly above the data grid:

| Filter | Type | Description | |--------|------|-------------| | Username | Text input | Search by username (debounced 500ms) | | Show Ongoing Sessions | Checkbox | When checked, only shows sessions without a stop time |

Disconnecting a Session

Administrator users (ROOT, SUPER_ADMIN, ADMIN) can disconnect active sessions directly from the data grid. The disconnect button appears as a stop icon in the Action column.

Disconnect button visibility requirements:

1. Current user has an admin role
2. The session supports Disconnect-Messages (supportDm = true)
3. The session is ongoing (no stop time recorded)

Disconnect Dialog:

• Confirmation: "Are you sure you want to disconnect the RADIUS session with username [username] and session ID [sessionId]?"
• On confirmation, a RADIUS Disconnect-Message is sent to the NAS.
• Success message: "Successfully sent RADIUS session disconnect request, waiting for session to stop"

Note

The disconnect action sends a RADIUS Disconnect-Message (RFC 3576/5176) to the NAS device. The actual session termination depends on the NAS honoring the disconnect request. The session may take a few seconds to reflect the stopped state.

Field Reference

| Field Name | Type | Required | Description | |------------|------|----------|-------------| | username | String | Yes | Authenticated user identity | | accountingSessionId | String | Yes | Unique RADIUS accounting session identifier | | radiusClientName | String | No | Name of the NAS device | | accountingStartTime | ZonedDateTime | No | Session start timestamp | | lastAccountingUpdateTime | ZonedDateTime | No | Most recent interim accounting update | | accountingStopTime | ZonedDateTime | No | Session end timestamp (null for ongoing sessions) | | sessionHandle | String | No | Assisted login session correlation ID | | supportDm | Boolean | Yes | Whether the NAS supports Disconnect-Messages | | terminationCause | String | No | Reason for session termination (empty default) |

Actions

Filter by Username

Purpose: Find sessions for a specific user. Steps: Enter a username in the filter text field. Result: After a 500ms debounce, the data grid updates to show only matching sessions.

Toggle Ongoing Sessions

Purpose: View only currently active sessions. Steps: Check the "Show Ongoing Sessions" checkbox. Result: The data grid filters to show only sessions without a stop time.

Disconnect Session

Purpose: Terminate an active RADIUS session by sending a Disconnect-Message to the NAS. Prerequisites:

• Admin role (ROOT, SUPER_ADMIN, or ADMIN)
• Session must be ongoing (no stop time)
• NAS must support Disconnect-Messages (supportDm = true)

Steps:

1. Locate the active session in the data grid.
2. Click the stop icon in the Action column.
3. Confirm the disconnect in the dialog.

Result: A Disconnect-Message is sent to the NAS. The session should receive a stop event within a few seconds if the NAS processes the request successfully.

Common Use Cases

Monitoring Active User Sessions

1. Check the "Show Ongoing Sessions" checkbox to see only active sessions.
2. Review the ongoing session count for current connection volume.
3. The page auto-refreshes every 3 seconds — no manual refresh needed.

Force-Disconnecting a Compromised Session

1. Filter by the compromised user's username.
2. Identify the active session(s).
3. Click the disconnect button and confirm.
4. Monitor the session to verify it receives a stop event.
5. Consider locking the user account or creating a filter rule to prevent re-authentication.

Verifying NAS Accounting Configuration

1. View all sessions without filters.
2. Verify that sessions from each NAS device appear with correct start times and session IDs.
3. Check that stopped sessions show appropriate termination causes.
4. Missing sessions may indicate accounting configuration issues on the NAS device.

Troubleshooting

| Issue | Possible Cause | Resolution | |-------|---------------|------------| | No sessions appear | No accounting data received from NAS devices | Verify RADIUS accounting is enabled on your NAS devices and pointing to MideyeServer | | Disconnect button not visible | Session doesn't support DM, isn't ongoing, or user lacks admin role | Verify all three conditions: admin role, ongoing session, supportDm is true | | Disconnect sent but session remains active | NAS did not honor the Disconnect-Message | Not all NAS devices support RFC 3576/5176; check NAS compatibility | | Sessions show but no stop times | NAS not sending accounting stop packets | Configure the NAS to send Accounting-Stop packets |

Related Pages

• RADIUS Clients — Configure NAS devices and their accounting server associations
• RADIUS Servers — Manage RADIUS server instances that process accounting requests
• Accounting — View aggregated accounting data with filtering and export capabilities
• Authentication Logs — Correlate session data with authentication events