Hello Frank -
On Sat, 19 Aug 2000, FlintHillsTechnical Support wrote:
> Hello--
>
> I am looking for some input on a method, if possible, to assign all of my dial up
users ip addresses via radiator from one common pool. I have looked at the
FramedGroupBaseAddress and the FramedGroup attributes but I am not sure if this
is the correct way to approach this. It appears that using
FramedGroupBaseAddress in each client definition that the base address would
have to be unique for each client? In other words you cannot do this--
>
> <Client 64.39.200.42>
> Secret
> DefaultRealm dialup.company.com
> NasType Ascend
> # This is the base address for Framed-Group = 0
> FramedGroupBaseAddress 64.39.201.1
> </Client>
>
> <Client 64.39.200.43>
> Secret
> DefaultRealm dialup.company.com
> NasType Ascend
> # This is the base address for Framed-Group = 0
> FramedGroupBaseAddress 64.39.201.1
> </Client>
>
> since it uses the port number on the NAS to determine the ip address?
>
> Instead, would it be more proper to use <AuthBy DYNADDRESS> and can I use it
in conjunction with my <AuthBy DBFILE> statement?
>
> <Realm dialup.company.com>
> RewriteUsername tr/A-Z/a-z/
> RewriteUsername s/\@dialup\.company\.com//
> <AuthBy DBFILE>
> DefaultSimultaneousUse 1
> Filename %D/users
> </AuthBy>
I would definitely recommend using the AuthBy DYNADDRESS construct, which can
be used in conjunction with any other AuthBy clause(s). There is an example
configuration file in "goodies/addressallocator.cfg" and the manual also
describes how to use it in sections 6.38 and 6.39.
> Also, can I assume that <AuthBy DYNADDRESS> will work with an Ascend NAS?
>
Yes, it will work with any NAS that accepts a Framed-IP-Address from Radius.
regards
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
