On Fri, 9 Apr 1999, Jeff Haas wrote:
> On Fri, Apr 09, 1999 at 09:56:34AM -0700, Thomas C Kinnen wrote:
> > John Lange wrote:
> > > How do I prevent / allow users from making ISDN connection. Is there a
> > > radius attribute that will allow this to happen?
> > >
> > > Reason I ask is, GTE just started allowing us to serve ISDN and I don't
> > > know how to prevent users from making single channel ISDN connections.
> > > Dual channel is easy, and built into our database, but single is the question.
> >
> > Use the NAS-Port-Type Check item:
> >
> > user1 Password="BLAMO", NAS-Port-Type = Async
> >
> > user2 Password="BLAT", NAS-Port-Type = ISDN
>
> This works fine, but requires multiple user-ids (which is a pain).
Hmm, I'm a Auth-Type = System weinie myself and would do it like this:
DEFAULT Auth-Type = Reject, NAS-Port-Type = ISDN
DEFAULT1 Auth-Type = System
etc,
etc,
end
That means that NO ONE can get on with ISDN, if you have particular users
that want/need ISDN, then put in their appropriate entry prior to any of
the defaults... And as Jeff pointed out you could use a group check also,
(if RADIUS 2.0.1+).
You know I did do a few examples for 1 port ISDN, 2+ port ISDN, etc... It
should be in the archives...
;)
-- Aloha from Paradise,Sherwood Got Clue? If so: ISPF! The Forum for ISPs by ISPs, <http://www.ispf.com>
- To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message. Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>