Here, we do it with RADIUS entries.
Those who don't pay for ISDN access fall through to the DEFAULT entry,
which looks like this for check items:
DEFAULT Auth-Type = System, NAS-Port-Type = Async
NAS-Port-Type = Async means that the user must be calling on an analog
modem in order to pass that check item.... if they call using ISDN, they
never get authenticated.
If someone pays for 64K (single channel) ISDN, they get their own entry:
<username> Auth-Type = System
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 255.255.255.254,
Framed-Routing = None,
Framed-MTU = 1500,
Framed-Compression = Van-Jacobson-TCP-IP,
Session-Timeout = 43200,
Idle-Timeout = 1800,
Port-Limit = 1
Note the "Port-Limit=1"
Then for those who pay for 128K (dual channel), they get "Port-Limit=2"
The Port-Limit=1 doesn't keep 'em from logging on twice (see various
discussions on Cistron RADIUS in the archives), but it does keep them from
creating a single 128K channel.
All that works like a champ... and allows us to have different rates for:
a) Analog modem callers
b) Single channel ISDN
c) Dual channel ISDN
One note - we allow our ISDN users to be able to access the system via
analog modems if they need to... occasionally, they'll be at a friend's
house, or someplace away from their ISDN line and need access - since
they're paying the higher rate anyway, we don't care if they come in analog
or ISDN.
Dave Stewart
System Manager
Homenet Communications, Inc.
=============================================
Never try to teach a pig to sing - it wastes your time
and annoys the pig.
=============================================
PGP Public Key located on the MIT Public key server
=============================================
Mirabilis ICQ UIN - 4982852
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>