Session Monitoring
When the Atrium Agent is connected and RADIUS Accounting is configured, Atrium tracks active WiFi sessions in real time. This gives you visibility into which visitors are currently connected to the guest network.
Active sessions view
The admin dashboard shows active WiFi sessions for each checked-in visitor. Session information includes:
- IP address — The IP assigned to the visitor's device.
- MAC address — The device's WiFi MAC address (from RADIUS Calling-Station-Id).
- Connected since — When the session was established.
- NAS IP — The WiFi controller that authenticated the session.
This data comes from RADIUS Accounting messages forwarded by the Agent to the server.
Manual session termination
From the dashboard, you can terminate a visitor's WiFi session manually without ending their visit:
- Open the visit detail view.
- In the session section, click Terminate Session.
- The Agent sends a disconnect command to the firewall.
- The result (success or failure) is displayed.
This is useful when you need to disconnect a specific device without checking out the visitor (e.g., the visitor switched devices, or there's a security concern about a specific session).
Session tracking limitations
Session tracking depends on RADIUS Accounting being correctly configured on your WiFi controller. If Accounting is not configured or not working:
- Authentication still works (visitors can connect with their voucher).
- Voucher revocation still works (new connections are rejected).
- But the Agent won't know which IP addresses belong to which visitors.
- Session termination will attempt to disconnect by username rather than by specific session, which is less precise.
Not all WiFi controllers send Accounting messages reliably. If session monitoring data is missing or incomplete, check your controller's RADIUS Accounting configuration as a first step.
Agent connection status
The dashboard shows the Agent's connection status for each site:
| Status | Meaning |
|---|---|
| Connected | Agent is online. RADIUS and session management are operational. |
| Disconnected | Agent is not connected. RADIUS continues on the Agent side (using cached vouchers), but the server can't push new vouchers or termination commands. |
The Agent reports its status every 60 seconds. If no status report is received for over 2 minutes, the connection is marked as disconnected.