On Sat, 26 Aug 2000, Leo Pascua wrote:
..
> Hi guys,
> 
> How to restrict or setup the user to log-in in specific time that will 
> automatically disconnect when users reach the time set in radius cannot 
> log-in when he/she time to log-in and allowed dial-up to connect in 
> internet,,, meaning single user or multi user.. how to restrict in radius 
> ,,any body who can help me...

You are asking a lot. I've spent the good part of two years (and a lot of
MosCom's money for hardware and software :) working on these problems. But
here are some tips:

1) you can use the Radius "Session-Timeout" parameter (also known as
"Ascend-Idle-Limit") to limit the maximum amount of time a user can spend
online. This is useful for prepaid, but in order to do prepaid you need to
keep accurate track (in real-time) of how much time a given user has
already spent. If you store your Radius CDR's in an SQL database, getting
realtime data is not a problem although if you have a lot of users you
will need a beefy database.

2) to limit multiple logins you need to keep track of sessions. There are
several ways of doing this (I use a database table containing the data on
logged-on users on the 100-odd MosCom dialup access points) but I believe
Cistron Radius has a stock way of doing this.

In any case, I believe Cistron is not the right choice if you're going for
scale. It's hard to modify. Try to talk to Oracle with that thing.. and
gnash your teeth in anger. We use Radiator (www.open.com.au/radiator/) as
our Radius server. Not free, but relatively cheap ($1000/site) and it's
written in Perl, so writing custom extensions is straightforward.


-- 

---------------------------------------------------------------------
Orlando Andico <[EMAIL PROTECTED]>       POTS Phone: +63   (2) 937-2293
Mosaic Communications, Inc.            GSM Mobile: +63 (917) 531-5893
Any sufficiently perverted technology is indistinguishable from Perl.

-
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Reply via email to