So would the catchall auth be done at the NAS or the RADIUS server?
-----Original Message-----
From: Dennis Burgess
Sent: Thursday, January 07, 2016 10:34 AM
To: [email protected]
Subject: Re: [AFMUG] RADIUS
Ie. You should never NOT authorize, .i.e. all pppoe sessions should
authenticate, maybe it goes to a login page or redirection page, but not
authorizing is bad, i.e. no connecdtivity.
Dennis Burgess, CTO, Link Technologies, Inc.
[email protected] – 314-735-0270 x103 – www.linktechs.net
-----Original Message-----
From: Af [mailto:[email protected]] On Behalf Of Ken Hohhof
Sent: Thursday, January 7, 2016 8:56 AM
To: [email protected]
Subject: Re: [AFMUG] RADIUS
Dennis, can you expand on your last sentence?
-----Original Message-----
From: Dennis Burgess
Sent: Thursday, January 07, 2016 7:05 AM
To: [email protected]
Subject: Re: [AFMUG] RADIUS
Typically the pppoe server is at the tower, so it has a local pool to hand
out, if the customer needs a static, that would be assigned via PPPOE as
well as a framed route if they need a specific block. For MT there are a
number of radius attributes, but the simplest is address-group, If all pppoe
servers are configured the same, giving a address group lobs them into
anything such as filters, firewall, redirection etc. the last though is ip
pool, so that you can give them a redirected pool and not use a public IP if
they are not auth. Big thing, they should always auth, just get redirected
if not valid. :)
Dennis Burgess, CTO, Link Technologies, Inc.
[email protected] – 314-735-0270 x103 – www.linktechs.net
-----Original Message-----
From: Af [mailto:[email protected]] On Behalf Of Simon Westlake
Sent: Wednesday, January 6, 2016 8:50 PM
To: [email protected]
Subject: [AFMUG] RADIUS
For those of you using RADIUS to manage your customers (whether via PPPoE,
or something else), how are you doing it? Are you using pools, static
addresses or a mixture? Are you using groups to control access/redirect to
delinquency pages etc or other methods? What kind of attributes are you
using? What is/are your NAS? I'm guessing mostly Mikrotik in this group!
I'm working on a bunch of RADIUS stuff right now, and trying to build it to
be as flexible as possible.. any input any of you can give on how you use
RADIUS on your network would be very much appreciated!
--
Simon Westlake
Skype: Simon_Sonar
Email: [email protected]
Phone: (702) 447-1247
---------------------------
Sonar Software Inc
The next generation of ISP billing and OSS https://sonar.software
