Re: Restrict to initial NAS used to logon

2008-04-12 Thread Ivan Kalik
Not sure what "max access-period" would be? If it relates to single session then use Session-Timeout to fix max length. If it relates to total time allowed then use sqlcounter (which will set Session-Timeout dinamically). If you are setting a Session-Timeout that will be the same for lagre number o

Re: Restrict to initial NAS used to logon

2008-04-11 Thread Tuc at T-B-O-H.NET
Hi, I will have to consider the NAS-Identifier replacing NAS-IP-Address. This is not for our use, this is at a customer site. I'm leary about using a field for something other than its intention (Or adding a field that is unexpected) due to the possibility of them installing a package late

Re: Restrict to initial NAS used to logon

2008-04-11 Thread Ivan Kalik
NAS-Identifier is not stored in radacct by default. But you can add it to or replace NAS-IP-Address with it in radacct table and accounting queries. radacct is used for - accounting. You need to put NAS-Identifier check in radcheck to stop users from connecting from other APs. You can a script at

Re: Restrict to initial NAS used to logon

2008-04-10 Thread Ivan Kalik
> So it looks like its sending it, just not making it into >the radacct files. :-/ So where to start looking for that? >> >> Or, use the "Packet-Src-IP-Address" attribute. >> > Thats gonna take a bit of headscratching to figure out >about. :) But thanks for the lead. > Since you don'

Re: Restrict to initial NAS used to logon

2008-04-10 Thread Tuc at T-B-O-H.NET
> > Is anyone doing anything like this already? > > They usually use equipment that sends a NAS identifier. > Hi, Sorry for a second followup, but I just looked over the radacct file and don't see anywhere that NAS-Identifier would be stored. Or are you saying that I need to still

Re: Restrict to initial NAS used to logon

2008-04-10 Thread Tuc at T-B-O-H.NET
> > Tuc at T-B-O-H.NET wrote: > > Looking to restrict a user to only be able to log in > > and re-log in to the initial NAS they first ever logged onto. > > (Hotspot) Looking at the radacct file where it looks like > > the check-items normally go against, I'm not seeing anything I > > can use

Re: Restrict to initial NAS used to logon

2008-04-10 Thread Alan DeKok
Tuc at T-B-O-H.NET wrote: > Looking to restrict a user to only be able to log in > and re-log in to the initial NAS they first ever logged onto. > (Hotspot) Looking at the radacct file where it looks like > the check-items normally go against, I'm not seeing anything I > can use as an identi

Restrict to initial NAS used to logon

2008-04-10 Thread Tuc at T-B-O-H.NET
Hi, Looking to restrict a user to only be able to log in and re-log in to the initial NAS they first ever logged onto. (Hotspot) Looking at the radacct file where it looks like the check-items normally go against, I'm not seeing anything I can use as an identifier. The nasipaddress is alw