Title: Message
If you support Ascend Filters...add
 
Profile=""
 Ascend-Data-Filter = "ip in forward tcp est"
 Ascend-Data-Filter = "ip in forward dstip 10.0.0.0/24"
 Ascend-Data-Filter = "ip in drop tcp dstport = 25"
 Ascend-Data-Filter = "ip in drop tcp dstport = 80"
 Ascend-Data-Filter = "ip in forward"
 
you can filter other TCP ports if interested
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yves
Sent: Wednesday, January 21, 2004 4:39 PM
To: [EMAIL PROTECTED]
Subject: [VOPRadius] Question: Email Access Only

If you mean, an Email only account, no dialup access at all, you would create an Email-Only profile.
 
1) Identify the NAS'es or proxies used for dialup (lets say you have three NASes/Proxies):
 
10.10.10.10, 10.10.10.20 and 10.10.10.30
 
You do not want users in the email-only profile to be able to access to devices.
 
2) Create the profile
 
Profile=""
<tab>Service-Type = Framed-User
<tab>Framed-Protocol = PPP
<tab>... other attributes ...
<tab>Source IP = "!10.10.10.10,10.10.10.20,10.10.10.30"
 
That way - if user with EmailOnly tries to use the email account for dialin, he'll get a rejection.
 
Note that this assumes of course you use radius for email authentication.
 
--
Yves Lacombe
Vircom Technical Support
----- Original Message -----
From: Brian T
Sent: Wednesday, January 21, 2004 4:32 PM
Subject: [VOPRadius] Question: Email Access Only

Is it possible with vircom radius to set up a profile that will allow someone dialing in access to email only?
 
Has anyone ever done this?
 
Is so, would you be willing to share youe profile and anything need to accomplish this?
 
Thank you for your time.
 
Brian T.
 

Reply via email to