It is important to coordinate with your network provider how the value will be sent or else the intended logic will fail and cause unintended authentication problems. For example, a value of 1 may stand for dial-up at 28kbps a value of 2 for dial-up at 54kbps etc. There are two different logic comparisons that can be made: 1) Allow access if the Connect-Info value received in the Access Request is equal to or less than the value specified in the profile 2) Allow access only if the Connect-Info value received in the Access Request is equal to the value specified in the profile. In this latter the case, the network provider generally will send an integer value corresponding to a specific network access. VOP Radius in turn will compare the value contained in the attribute with what has been specified in the user's assigned profile (i.e. For this to work, the Network Access Server (NAS) must send attribute 77 (i.e. It is possible with VOP Radius to allow or deny access based on the connection speed of the user. How-To: Allow or deny access based on the user's connection speed (connect-Info 77) How-To: Set Up VOP Radius to Authenticate Against Microsoft Active Directory (i.e.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |