[VOP RADIUS] Profiles and DSL users

[Shadi Haddadin]

Title: Message

Dear Andrew,   I was wondering if there is any progress on this case. if not. is there any way that we can ask Vircom to customize something for us. and that is to consider the NAS-Port-Type = Virtual as Analogue.   so Analogue Access is :- Async and Virtual   Digital Access is  :- ISDN,Sync     pls. this is really argent for us now. and we may take the decision to migrate from Vircom to another RADIUS server. and for sure..I don't want to do this.   waiting for your kind reply. Best regards, Shadi Haddadin ________________________________ Internet Systems Manager Mob  : +962-77-390098 Tel  : +962-6-4736941 ext: 305        +962-6-4736800 http://www.next.jo NEXT Co. LTD. ________________________________ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Customer Support Sent: Thu, March 14, 2002 3:00 PM To: [EMAIL PROTECTED] Subject: [VOP RADIUS] Profiles and DSL users Hi Luiz,   I tested this again and unfortunately I can not get NAS-Port-Type to work as a check item.   Profile = "ISDN"     NAS-Port-Type = Async   If this is my profile, then I can still authenticate even if in the Access Request the NAS-Port-Type = ISDN.  I may be missing something, but the only way that I can see this working is to use "Digital-Access" or "Analog-Access". The only negative part is that this groups all the different NAS-Port-Types into only 2 categories. For what you want to do, then you need at least 3 categories.   I will have to bring this up in the next programmers meeting to see if this behaviour can be changed.   Thank-you   Andrew O'Halloran Technical Support Department Vircom Inc. http://www.vircom.com Email: [EMAIL PROTECTED] Phone: (514) 990-2532 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Luiz Lima Sent: Thursday, March 14, 2002 2:59 PM To: [EMAIL PROTECTED] Subject: [VOP RADIUS] Profiles and DSL users I apologize, Andrew. You're right. This is good news, though. What you're telling me is that I can have:   Profile = "ISDN"     NAS-Port-Type = Async     NAS-Port-Type = ISDN   Profile = "DSL"     NAS-Port-Type = Async     NAS-Port-Type = Virtual   Profile = "AnalogOnly"     NAS-Port-Type = Async   Will this enable me to give ISDN users both ISDN and analog, DSL users their "Virtual" and analog as a backup and for regular users only analog (not DSL (Virtual) and not ISDN)?   Or did I miss something again?   --- Luiz Lima Image Link Internet http://www.imagelink.com.br -----Mensagem Original----- De: Customer Support Para: [EMAIL PROTECTED] Enviada em: quinta-feira, 14 de mar�o de 2002 16:26 Assunto: [VOP RADIUS] Profiles and DSL users Hi Luiz,   No I said that in reference to the other attributes you mentioned:   ********************************** Can I set the default like this: Attr-590075 = !"Ninternet_IMAGELINK"   And then allow the DSL profile: Attr-590075 = "Ninternet_IMAGELINK"   Would that work? This attribute only comes in packets from the DSL service.   --- Luiz Lima Image Link Internet http://www.imagelink.com.br   *************************************   You took these attributes from an accounting packet. If you tried to use them in a profile, then VOP Radius would try to add them to the Access Accept packet. The real issue is that you can not use this attribute as a check item.   Thanks   Andrew O'Halloran Technical Support Department Vircom Inc. http://www.vircom.com Email: [EMAIL PROTECTED] Phone: (514) 990-2532 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Luiz Lima Sent: Thursday, March 14, 2002 12:46 PM To: [EMAIL PROTECTED] Subject: [VOP RADIUS] Profiles and DSL users Mike,   Andrew said this will cause VPRRS to add these attributes to the respose packet instead of allow/deny access based on them.   --- Luiz Lima Image Link Internet http://www.imagelink.com.br -----Mensagem Original----- De: Mike Wilker Para: [EMAIL PROTECTED] Enviada em: quinta-feira, 14 de mar�o de 2002 13:52 Assunto: [VOP RADIUS] Profiles and DSL users I have no problems simply adding both NAS-Port-Type = Async and NAS-Port-Type = Virtual to the same profile.   Mike Wilker Director of Network Operations Tiger Communications & Local Link USA ----- Original Message ----- From: Customer Support To: [EMAIL PROTECTED] Sent: Wednesday, March 13, 2002 2:19 PM Subject: [VOP RADIUS] Profiles and DSL users Hi Luiz,   I have testing a few things and it does not seem possible to do what you want.   I was hoping to use the attribute "NAS-Port-Type" as a check item in the profiles.txt. But it seems that this attribute can not be used in this way.   Analog-Access is equivalent to NAS-Port-Type = Async   Digital-Access is equivalent to NAS-Port-Type = ISDN or Virtual   As it is now there is not a way of making the value of "Virtual" into its own category (e.g. Virtual-Access).   I will make this a feature request.   Thank-you   Andrew O'Halloran Technical Support Department Vircom Inc. http://www.vircom.com Email: [EMAIL PROTECTED] Phone: (514) 990-2532 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Luiz Lima Sent: Wednesday, March 13, 2002 10:47 AM To: [EMAIL PROTECTED] Subject: [VOP RADIUS] Profiles and DSL users I'm setting up Vircom's RADIUS server for the first time. I'm trying to configure profiles that will ensure me that only DSL customers will be able to connect to DSL.   I think I can do it by NAS but I was wondering if there's a more elegant solution, based on NAS-Port-Type.   If I set Analog-Access, it means "NAS-Port-Type = Async"; if I set Digital-Access, it means "NAS-Port-Type = ISDN". DSL packets, however, come with "NAS-Port-Type = Virtual". Can I treat it somehow?   I would also like to give DSL users analog access only (ISDN as an extra). So, I would like to do something like:   Profile = "DSL_ANA"     Analog-Access = YES     Digital-Access = NO     Virtual-Access = YES   Profile = "DSL_FULL"     Analog-Access = YES     Digital-Access = YES     Virtual-Access = YES   I know there's not such "Virtual-Access", but I just wanted to make sure you understand what I want. Is it possible?   --- Luiz Lima Image Link Internet http://www.imagelink.com.br