|
Hello
Brad,
For
(a.)
Latest
release allows you to have multiple profiles per user.
Latest
release allows you to have port-limit per NAS (with a new profile attribute)
.
We
don't do (b.) yet, but we will very soon.
Sylvain Savignac, P.
Eng.
Thanks Sylvain, This
is exactly what I did shortly after my post. It turns out that GP has several
NAS that don’t send service-type.
What I really need in
a radius now are the following;
- Ability to have two
profiles with the same name and radius use the one that matches the request.
Also, port-limits based on profile (allowing slipstream and other secondary
services using the same username/password combination, while maintaining a
port-limit of 1 (per matched profile).
- The ability for
Radius to recognize a re-connected user based on caller-id and username in
addition to the current functionality where a re-connected user would be
recognized based on NasPortID and username.
The GP situation,
as well as other services that can now be auth’d against radius are
making me look around. I really want to stay with VOP.
Brad
Johnson
Systems
Administrator
Local Link Network Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sylvain Savignac
Sent: Monday, September 27, 2004 8:50
AM
To:
[EMAIL PROTECTED]
Subject:
[VOPRadius] OT: Globalpops
If the NAS is not
sending any service-type, under Radius Server tab check Default PPP
Service.
If this option is
checked, anytime the Radius server receives a request with a Service-Type
of
Login-User
(rlogin/telnet) or an unknown service-type, it will grant the access as a PPP
connection.
If the usual returned
attributes for a PPP connection are bugging you, in your profile insert
the
following you should
use the following line in your
profiles:
<tab>Remove-Attributes="6-8,13"
By the way, in
4.0.228 Remove-Attributes could not be used for a list before the 4.0.228.8
update coming up
today. ( You had to put them on several lines)
Sylvain Savignac, P.
Eng.
-----Original
Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brad Johnson
Sent: September 22, 2004 6:21
PM
To:
[EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
Well, one of them
is currently picking the scabs that formed on his ass after I chewed on it
awhile. After the second round of “can’t you make monkeys fly out of your
butt?” I got really mad.
Brad
Johnson
Systems
Administrator
Local Link Network Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lanham Rattan
Sent: Wednesday, September 22, 2004
4:23 PM
To:
[EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
I found you have to
push really hard, the first level guys don't know
much.
-----Original
Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Brad Johnson
Sent: Wednesday, September 22, 2004
2:57 PM
To:
[EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
Well, this too is
a problem with a NAS, but they seem to be more willing to bash my radius
and suggest that I rewrite it to do backflips rather than taking the
problem I have proven to exist with the NAS and dealing with it. Its
frustrating.
Brad
Johnson
Systems
Administrator
Local Link Network Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Lanham
Rattan
Sent: Wednesday,
September 22, 2004 3:51 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
I have a nice
nightmare story about GP, but in their defense it was really the poor
engineering at Level 3 as Level 3 owns the NAS
boxes.
-----Original
Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of Brad
Johnson
Sent:
Wednesday, September 22, 2004 2:47 PM
To:
[EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
You must not as
I have since confirmed that the NAS in question is absolutely not
sending a service-type. Shortly after proving this, GP suggested that I
make Radius work-arounds for request coming form their Radius
Servers.
I’m really
starting to NOT like GP.
Thanks for the
help.
Brad
Johnson
Systems
Administrator
Local Link Network Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Brad
Johnson
Sent:
Wednesday, September 22, 2004 12:56 PM
To:
[EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
Do you specify
Service-Type = Framed-User in your dialin profile for users
authenticating via GP ?
Brad
Johnson
Systems
Administrator
Local Link Network Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Cary
Fitch
Sent: Wednesday,
September 22, 2004 12:48 PM
To:
[EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
We called and were
authenticated ok.
----- Original Message
-----
Sent:
Wednesday, September 22, 2004 12:26 PM
Subject:
[VOPRadius] OT: Globalpops
I’m hoping that at least a
couple of you, who use globalpops, would help me with an issue I’m
having with a particular GP number by attempting to connect yourself.
The number is 270-953-5441
which is an on-net number. Connections to this number are being
rejected with “Requested Service Denied” and debug indicates that this
particular NAS is sending ether no service-type or
garbage.
Your results would help me
greatly as GP is continually trying to throw this back in my lap and
blame my radius (even though all other numbers work
fine).
Brad
Johnson
Systems
Administrator
Local
Link Network Operations
|
