В примере приводится не как пускать , а как НЕ пускать на ISDN. On Wed, Jun 04, 2003 at 12:38:55PM +0300, Vladimir Litovka wrote:
Thanks, I'll try :-)
Oleh Hrynchuk wrote:
Hi.
There is a piece of Radius template below for one group of my former users in Telenor. I suppose that option "NAS-Port-Type" will be most interesting for you. But be careful! There was dirty hacked Merit Radius ;)
1. Tnet-Economy
Typical template seems to be as like:
username Encrypted-Password = "md5_encrypted_password_here", NAS-Port-Type != ISDN-Sync, Deny-Message = "*", Simultaneous-Use = 1 Service-Type = Framed, Framed-Protocol = PPP, Framed-IP-Address = 255.255.255.254, Framed-IP-Netmask = 255.255.255.0, Framed-Routing = Broadcast-Listen, Framed-Compression = Van-Jacobson-TCP-IP, Filter-Id = "emailonly", Framed-MTU = 1500
There are some interesting fields for us here:
- NAS-Port-Type != ISDN-Sync
It prevents to use ISDN-Sync ports on our NASes.
- Deny-Message = "*"
It causes message "User access is denied because
: " - Simultaneuos-Use = 1
It prevents to be no more that one simultaneous session with the same login name. It is actual for all Radius clients (NASes).
- Filter-Id = "emailonly"
It describes Cisco's extended ACL or Livingston's filter. It is used to restrict user's access to use e-mail access and access to our network resources only (without our proxy). I apologize that we'll have several filters. Not "emailonly" only.
/oleh
=================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message
-- :r !ripewhois DOKA-RIPE ------------------------------------------------------------------------- Never try to teach a pig to sing. It wastes your time and annoys the pig. -- Lazarus Long, "Time Enough for Love"
=================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message
-- Alexey Balabushevich nic-hdl: AB433-RIPE =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message