Ok, I’ll look closer. Last question.
Are the port limits exclusive to each profile? Meaning, if a user has two
profiles specified and both profiles include a port limit of 1 can there be 1
connection from each profile simultaneously?
Brad Johnson
Systems Administrator
Local Link Network
Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sylvain Savignac
Sent: Tuesday, September 28, 2004
9:18 AM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
Briefly, it can decide to use a
profile rather than another based on:
- Analog-Access
- Called-Station-Id
- Calling-Station-Id
- Connect-Speed-Limit
- Day-Of-Week
- Digital-Access
- Expiration
- NAS-IP-Address
- NAS-Port-Id
- NAS-Port-Limit
- NAS-Port-Type
- Port-Limit
- Service-Type
- Session-Timeout
- Source-IP
- Time-Bank
- Time-Of-Day
To see the flowchart
for the selection algorythm ,
go to our web site and download the
document
" What's new in 4.0.228.pdf
" . You fill find it on page 5.
Sylvain Savignac, P. Eng.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Brad Johnson
Sent: September 27, 2004 6:32 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
I read the manual and didn’t come
away with the idea the multiple profiles per user would help me. Can you
provide more info on how it works? Does it use the profile that best matches
and if so, based on what attributes?
Brad Johnson
Systems Administrator
Local Link Network
Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sylvain Savignac
Sent: Monday, September 27, 2004
4:49 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
Latest release allows you to have multiple
profiles per user.
Latest release allows you to have
port-limit per NAS (with a new profile attribute) .
We don't do (b.) yet, but we will very
soon.
Sylvain Savignac, P. Eng.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Brad Johnson
Sent: September 27, 2004 1:37 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
Thanks Sylvain, This is exactly what I did
shortly after my post. It turns out that GP has several NAS that don’t
send service-type.
What I really need in a radius now are the
following;
- Ability to have two profiles
with the same name and radius use the one that matches the request. Also,
port-limits based on profile (allowing slipstream and other secondary
services using the same username/password combination, while maintaining a
port-limit of 1 (per matched profile).
- The ability for Radius to
recognize a re-connected user based on caller-id and username in addition
to the current functionality where a re-connected user would be recognized
based on NasPortID and username.
The GP situation, as well as other
services that can now be auth’d against radius are making me look around.
I really want to stay with VOP.
Brad Johnson
Systems Administrator
Local Link Network
Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sylvain Savignac
Sent: Monday, September 27, 2004
8:50 AM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
If the NAS is not sending any
service-type, under Radius Server tab check Default PPP Service.
If this option is checked, anytime the
Radius server receives a request with a Service-Type of
Login-User (rlogin/telnet) or an unknown
service-type, it will grant the access as a PPP connection.
If the usual returned attributes for a PPP
connection are bugging you, in your profile insert the
following you should use the following line
in your profiles:
<tab>Remove-Attributes="6-8,13"
By the way, in 4.0.228 Remove-Attributes
could not be used for a list before the 4.0.228.8
update coming up today. ( You had to put
them on several lines)
Sylvain Savignac, P. Eng.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Brad Johnson
Sent: September 22, 2004 6:21 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT: Globalpops
Well, one of them is currently picking the
scabs that formed on his ass after I chewed on it awhile. After the second
round of “can’t you make monkeys fly out of your butt?” I got
really mad.
Brad Johnson
Systems Administrator
Local Link Network
Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lanham Rattan
Sent: Wednesday, September 22,
2004 4:23 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
I found you have to push really hard, the
first level guys don't know much.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On
Behalf Of Brad Johnson
Sent: Wednesday, September 22,
2004 2:57 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
Well, this too is a problem with a NAS,
but they seem to be more willing to bash my radius and suggest that I rewrite
it to do backflips rather than taking the problem I have proven to exist with
the NAS and dealing with it. Its frustrating.
Brad Johnson
Systems Administrator
Local Link Network
Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lanham Rattan
Sent: Wednesday, September 22,
2004 3:51 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
I have a nice nightmare story about GP,
but in their defense it was really the poor engineering at Level 3 as Level 3
owns the NAS boxes.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On
Behalf Of Brad Johnson
Sent: Wednesday, September 22,
2004 2:47 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
You must not as I have since confirmed
that the NAS in question is absolutely not sending a service-type. Shortly
after proving this, GP suggested that I make Radius work-arounds for request
coming form their Radius Servers.
I’m really starting to NOT like GP.
Thanks for the help.
Brad Johnson
Systems Administrator
Local Link Network
Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brad Johnson
Sent: Wednesday, September 22,
2004 12:56 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
Do you specify Service-Type = Framed-User in
your dialin profile for users authenticating via GP ?
Brad Johnson
Systems Administrator
Local Link Network
Operations
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cary Fitch
Sent: Wednesday, September 22,
2004 12:48 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] OT:
Globalpops
We called and were authenticated ok.
----- Original Message -----
Sent: Wednesday,
September 22, 2004 12:26 PM
Subject: [VOPRadius] OT:
Globalpops
I’m hoping that at least a couple of you, who use
globalpops, would help me with an issue I’m having with a particular GP
number by attempting to connect yourself.
The number is 270-953-5441 which is an on-net number.
Connections to this number are being rejected with “Requested Service
Denied” and debug indicates that this particular NAS is sending ether no
service-type or garbage.
Your results would help me greatly as GP is continually
trying to throw this back in my lap and blame my radius (even though all other
numbers work fine).
Brad Johnson
Systems Administrator
Local Link Network Operations
|
