Was this ever answered?  I too, need to limit the numbers of ports available to groups of users.

I'm not using sql, and don't really want to. As I run different groups on different radius servers (all nas's talk to 1 radius proxy) can I limit using radutmp?  There are no clear docs on this if it is true.

Thanks,

Graeme


Message: 13
Date: Wed, 12 Jun 2002 18:22:49 +0200 (CEST)
From: Daniel Marquez-Klaka <[EMAIL PROTECTED]>
To: freeradius-users Mail-List <[EMAIL PROTECTED]>
Subject: Re: port limitation
Reply-To: [EMAIL PROTECTED]


Hi again,

but isn't Simultaneous-Use only taking care about same usernames ?
What i want is to limit the usable ports per customer. To explain a bit
better:

I'm using mysql as backend for freeradius. There is ,of cause, the
usergroup table:

1 user-1 group-1
2 user-2 group-1
3 user-3 group-1
4 user-4 group-2
5 user-5 group-2
...........


what i wanna archieve is to limit the usable ports per group.
i.e. group-1 can use up to 10 ports, group-2 up to 1000.


.... or did i get something wrong,

Daniel


On Wed, 12 Jun 2002, Alan DeKok wrote:


Daniel Marquez-Klaka <[EMAIL PROTECTED]> wrote:

hmmm, but isn't it posible that radius keeps track about how many
sessions are connected for a group or dialed number, and send back
an access-reject if the limit is reached ?


That's what Simultaneous-Use does. But it's not perfect.

e.g. It relies on getting accounting packets from the NAS. If
there's a problem, then the information on the RADIUS server disagrees
with what's happening on the NAS.

If you have one NAS, setting 'Port-Limit=1' is preferable to
Simultaneous-Use.

Alan DeKok.


- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to