Re: (PM) RADIUS Question

Thomas Kinnen (tkinnen@usacomputers.net)
Fri, 29 May 1998 07:50:17 -0400 (EDT)

On Thu, 28 May 1998, Steve Coleman wrote:

> What would be the best way to prevent a user from logging into a certain PM
> chassis, using RADIUS for authentication. The "NAS-IP-Address" field only
> works for one IP address. It would work great if we wanted to limit them to
> only one PM, how would we accomplish the reverse? Allowing them access to
> all but one box?

You could use a combination of Auth-Type = Reject along with NAS-IP and
groups.

Tom

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>