Re: (ASCEND) SNMP Question

[John Coy <jcoy@anc.net>]

I think that perhaps we've moved past the point of the original
post which was to prevent simultaneous unauthorized connections
by users across multiple chassis.  I agree with you that you
can enable stacking and have successful MPP connections across
two chassis.  However, you cannot prevent a single-channel analog
user from dialing into one chassis, and then connect again to
another chassis (even with Ascend-Maximum-Channels = 1).  I've
tested this (and I see it on my network all the time).

There are RADIUS implementations which attempt to prevent 
simultaneous use, but they're buggy/flawed to say the least.
They rely on the NAS to report connections, but it's difficult
to ensure reliable state information to be reported, especially
across a NAS reboot.

In any case, I am not sure if you're still responding to the
original point, or making a separate point about "stacking"
allowing the communication of multiple chassis' with one another.
I agree, stacking works nicely for MPP across multiple chassis.
It does not, however, prevent simultaneous multiple connections
of single-channel users, even with "Shared Profile = No".

John

At 12:06 PM 7/24/99 -0700, you wrote:
>(You may have typo'd can vs. can't?)
>
>Right this moment, I have MPP users connected across multiple maxen in
>the stack.  SNMP shows call type "15" when a user is connected in this
>manner.  It works for both analog and ISDN.
>
>As for physical networks, I can't say, but I'm inclined to agree since
>MPP needs to assign the same IP number for each connection.
>
>I have MPP enabled and Shared Profiles disabled on the box, and RADIUS
>set up like this for MPP users:
>
>        Framed-Protocol = MPP,
>        Ascend-Shared-Profile-Enable = Shared-Profile-Yes,
>        Ascend-Maximum-Channels = 2,
>
>Very often, one channel is on one max, the other on another max.
>
>Jack
>
>> 
>> Even with stacking enabled, a user with a session on one
>> MAX can connect to a different chassis on the same "stack".
>> This is especially true for users dialing into chassis on
>> different physical networks.
>> 
>> 
>> At 09:31 AM 7/22/99 -0700, you wrote:
>> >It's called "stacking".
>> >
>> >> 
>> >> That only works on a per-chassis basis on a Max4000/6000.
>> >> If a customer dials into multiple chassis with the same
>> >> username, shared profiles = no won't help.
>> >> 
>> >> Ascend/Lucent should consider putting a feature in the code
>> >> that allows chassis to communicate with one another to
>> >> determine multiple logins.
>> >> 
>> >> John
>> >> 
>> >> At 08:54 AM 7/20/99 +0200, Zanten, Marco van wrote:
>> >> >Hi,
>> >> >
>> >> >Why do'nt you set shared profiles = no
>> >> >in radius or on the MAX.
>> >> >I'm not sure but if it is possible on a 4000 and 6000 but on a TNT it
>> >> >can
>> >> >
>> >> >
>> >> >good luck
>> >> >
>> >> >Marco van Zanten
>> >> >
>> >> >> -----Original Message-----
>> >> >> From:	Sonny [SMTP:sonny@caltel.com]
>> >> >> Sent:	maandag 19 juli 1999 17:25
>> >> >> To:	ascend-users@bungi.com
>> >> >> Subject:	(ASCEND) SNMP Question
>> >> >> 
>> >> >> Hi all,
>> >> >> 
>> >> >> Does anybody know what the snmp code is to disconnect a user.
>> >> >> I have 4 4000 units and 1 6000 unit.  I am writing script to 
>> >> >> check for double logins and then disconnect the abusers that 
>> >> >> will run from the crontab.  And yes I have tried reading the
>> >> >> mibs and tried a bunch of options, but have been unable to 
>> >> >> figure out the right one.
>> >> >> Thanks in advance
>> >> >> 
>> >> >> Sonny Abalos
>> >> >> Calaveras Internet
>> >> >> ++ Ascend Users Mailing List ++
>> >> >> To unsubscribe:	send unsubscribe to
>> >> >> ascend-users-request@bungi.com
>> >> >> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
>> >> >++ Ascend Users Mailing List ++
>> >> >To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
>> >> >To get FAQ'd:	<http://www.nealis.net/ascend/faq>
>> >> 
>> >> ++ Ascend Users Mailing List ++
>> >> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
>> >> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
>> >> ++ Ascend Users Mailing List ++
>> >> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
>> >> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
>> >> 
>> 

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>