Re: Restrict to initial NAS used to logon

2008-04-12 Thread Ivan Kalik
Not sure what max access-period would be? If it relates to single session then use Session-Timeout to fix max length. If it relates to total time allowed then use sqlcounter (which will set Session-Timeout dinamically). If you are setting a Session-Timeout that will be the same for lagre number of

Re: Restrict to initial NAS used to logon

2008-04-11 Thread Ivan Kalik
NAS-Identifier is not stored in radacct by default. But you can add it to or replace NAS-IP-Address with it in radacct table and accounting queries. radacct is used for - accounting. You need to put NAS-Identifier check in radcheck to stop users from connecting from other APs. You can a script at

Re: Restrict to initial NAS used to logon

2008-04-11 Thread Tuc at T-B-O-H.NET
Hi, I will have to consider the NAS-Identifier replacing NAS-IP-Address. This is not for our use, this is at a customer site. I'm leary about using a field for something other than its intention (Or adding a field that is unexpected) due to the possibility of them installing a package

Restrict to initial NAS used to logon

2008-04-10 Thread Tuc at T-B-O-H.NET
Hi, Looking to restrict a user to only be able to log in and re-log in to the initial NAS they first ever logged onto. (Hotspot) Looking at the radacct file where it looks like the check-items normally go against, I'm not seeing anything I can use as an identifier. The nasipaddress is

Re: Restrict to initial NAS used to logon

2008-04-10 Thread Alan DeKok
Tuc at T-B-O-H.NET wrote: Looking to restrict a user to only be able to log in and re-log in to the initial NAS they first ever logged onto. (Hotspot) Looking at the radacct file where it looks like the check-items normally go against, I'm not seeing anything I can use as an

Re: Restrict to initial NAS used to logon

2008-04-10 Thread Tuc at T-B-O-H.NET
Tuc at T-B-O-H.NET wrote: Looking to restrict a user to only be able to log in and re-log in to the initial NAS they first ever logged onto. (Hotspot) Looking at the radacct file where it looks like the check-items normally go against, I'm not seeing anything I can use as an

Re: Restrict to initial NAS used to logon

2008-04-10 Thread Tuc at T-B-O-H.NET
Is anyone doing anything like this already? They usually use equipment that sends a NAS identifier. Hi, Sorry for a second followup, but I just looked over the radacct file and don't see anywhere that NAS-Identifier would be stored. Or are you saying that I need to still use

Re: Restrict to initial NAS used to logon

2008-04-10 Thread Ivan Kalik
So it looks like its sending it, just not making it into the radacct files. :-/ So where to start looking for that? Or, use the Packet-Src-IP-Address attribute. Thats gonna take a bit of headscratching to figure out about. :) But thanks for the lead. Since you don't need