Re: (PM) Denying access based on NAS-IP-Address?

Matthew Walker (mwalker@lidcam.com.au)
Thu, 26 Feb 1998 10:32:55 +1100

"Zak Wolfinger" <zak@cyberlink.com> writes:
>I know this belongs in portmaster-radius, but I didn't get
>ANY response there.
>
>We are deploying our first PM3 and are charging extra for
>56K access (PRI tarrifs in Indiana are terrible). Anyway I
>want to set up my users file to check the NAS-IP-Address and
>only let people who have paid for 56K into the PM3. All
>other customers dial a different number and log into PM2's.
>My current user file is structured like so:
>
>myname Password = "mypass"
>Service-Type = Framed-User,
>Framed-Protocol = PPP,
>Session-Timeout = 21600,
>Idle-Timeout = 1200
>
>and I am not using any DEFAULT accounts. How do I
>accomplish this?

Zak,

Probably the easiest way is to add an entry like this for every user not
allowed into the PM3:

myname Auth-Type = Reject, NAS-IP-Address = address of PM3 here

OR you could have entries like this for each 56k user at the top of the file:

myname Password = "mypass", NAS-IP-Address = address of PM3 here
Service-Type = Framed-User,
Framed-Protocol = PPP,
Session-Timeout = 21600,
Idle-Timeout = 1200

and then one DEFAULT entry right underneath like this to catch the non 56k
users:

DEFAULT Auth-Type = Reject, NAS-IP-Address = address of PM3 here

which one you choose probably depends upon the ratio of 56k to normal
users. (ie. which one gives you less lines to edit.)

Regards

Matthew Walker

Matthew Walker <mailto:mwalker@lidcam.com.au> Lidcam Technology
Ph: +61 3 9820 9077 Level 5 499 St Kilda Rd
Fax: +61 3 9866 1245 Melbourne VIC 3004
<http://www.lidcam.com.au/> AUSTRALIA

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>