Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: (ASCEND) RADIUS & MAXen - access question



Hi,

The NAS-Identifier (in AAC) or NAS-IP-Address attribute is what we call a
checklist attribute.  It should be placed on the first line with the
username, like this:

joe Password = "youknowit", NAS-Identifier = 202.10.120.100
	...

Rgds,
Keith

> -----Original Message-----
> From: owner-ascend-users@max.bungi.com
> [mailto:owner-ascend-users@max.bungi.com]On Behalf Of Welland, Chris
>
> The Access-Control manual isn't clear, but it looks as though you can
> only specify a single NAS-IP-Address per user.  Thus for your students,
> specify the NAS-IP-Address of the max4000 and for staff, don't specify
> one at all.  This will ensure your students can only authenticate via
> the 4000 and the staff can come in any way they please.  So a student
> profile would look like....
>
> 	username        Crypt-Password = "Kkl8nasd_29bakJ"
> 		NAS-IP-Address = 10.1.1.1,
> 		Service-Type = Framed-User,
> 		Framed-Protocol = PPP,
> 		Ascend-Maximum-Call-Duration = 120
>
> As I say, I'm not actually using this so I'm not sure whether it works,
> but it's exactly the behaviour described in the manual.  Let me know
> whether it works.
>
> Regards,
> Chris
>
>
> > -----Original Message-----
> > From:	Michael Curran [SMTP:mcurran@csu.edu.au]
> > Sent:	Tuesday, June 02, 1998 5:14 AM
> > To:	ascend-users@bungi.com
> > Subject:	(ASCEND) RADIUS & MAXen - access question
> >
> > A question for the experienced RADIUS administrators out there...
> >
> > We have a single Max4000 and are about to add 2 x Max2000s to our
> > network.  We use RADIUS for dialin authentication and have a very
> > simple user profile for every user that looks like:
> >
> > username        Crypt-Password = "Kkl8nasd_29bakJ"
> >                 Service-Type = Framed-User,
> >                 Framed-Protocol = PPP,
> >                 Ascend-Maximum-Call-Duration = 120
> >
> > Our users are staff members and students.
> >
> > We want ONLY staff to be able to authenticate through the two new
> > Maxen... but both staff and students to be able to use the existing
> > Max4000.
> >
> > Can somebody tell how I can achieve this with RADIUS and the Maxen?
> >
> > I really do appreciate your wisdom!
> >
> > Regards,
> >
> >
> >
> >
> > Michael
> >
> >
> >
> > -------------------------------------------------------------------
> > - Michael Curran                              mcurran@csu.edu.au  -
> > -                          http://athene.mit.csu.edu.au/~mcurran  -
> > -------------------------------------------------------------------
> > - Information Technology Officer        Charles Sturt University  -
> > - Online Support & Systems Programming                            -
> > -------------------------------------------------------------------
> > - "Confidence, like art, never comes from having all the answers; -
> > - it comes from being open to all the questions"		  -
> > -                                              Earl Gary Stevens  -
> > -------------------------------------------------------------------
> > ++ Ascend Users Mailing List ++
> > To unsubscribe:	send unsubscribe to
> > ascend-users-request@bungi.com
> > To get FAQ'd:	<http://www.nealis.net/ascend/faq>
> ++ Ascend Users Mailing List ++
> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
>

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>


References: