We have the same thing.. Users hogging our 800# lines all day and/or
forgetting to disconnect.
We use a system of mandatory 4 hour disconnect times. So our users know
that every 4 hours they have to dial back in. This solves our people
leaving their systems online all day while they go out to meetings.
We then have a 20 hour a month dial-in restriction. This forces our 800# to
only be used as a backup when VPN use is not possible.
Some business groups that require dial-in access and are willing to pay the
800# cost are allowed 160 hours per month (40 hours per week dial-in time).
If a user needs more than 160 hours they have to call us to be "unlocked"
for another 20 hours.
*I do not know of a way to control online by the amount of "data" passing
over the wire. It would be nice to know the difference between a "busy"
user and a "idle - 10 minute email check" user but I don't know if a NAS
that would send that data back to a radius server.
-Michael Audet
Network Services
Chubb & Son
[EMAIL PROTECTED]
----- Original Message -----
From: "Kitabjian, Dave" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, April 16, 2001 3:30 PM
Subject: (RADIATOR) Enforcing Time Abuse
> We seem to have a constant chunk of ports hogged up by users who aren't
> using the Internet "interactively". This kills our dialup resources (and
> violates our Terms and Conditions).
>
> We already have an Idle-Timeout set, but that doesn't catch people who
have
> AIM running, or who set Eudora to automatically check their mail every 10
> minutes, since they pass data. And we don't want to use Session-Timeout
> since that will kick them off even if they're "active" at the time of the
> Timeout.
>
> So...
>
> What we'd really like is a "parametrized Idle-Timeout": an Idle-Timeout
that
> will kick you off if your recent usage falls BELOW AN ADJUSTABLE THRESHOLD
> of bytes/minute. Is there such a thing?
>
> Another option might be a "conditional Session-Timeout": after
> Session-Timeout is exceeded, prompt the user if he needs to remain
> connected, and if there is no reply after X minutes, disconnect them. Is
> this possible?
>
> Or, what other solutions are out there for attacking this problem?
>
> Thanks in advance!
>
> Dave
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
