Em 15-04-2014 13:51, Peter N. M. Hansteen escreveu:
> Giancarlo Razzolini <grazzol...@gmail.com> writes:
>
>> I use the mentioned solution using pflow + nfsen. But, if you want to
>> have accounting for billing purposes, I suggest you use a more robust
>> method, using radius. 
> Why would radius be a more robust method? Pure curiosity here.
>
> - Peter
Because using radius you can have a control per user, and accountability
per user, not per IP. For small networks, where you control 100% of the
devices in it, it might work just using the pflow + nfsen case (and this
is my case, for example). But for a bigger network it will surely drive
the admin crazy, if not fail completely. Today with smartphones and
tablets, a user can have at least a minimum of 2 ip addresses associated
with it. Sure, you could write a nfsen plugin to deal with it. And also
keep a table of ip address associated with individual users. See where
this is going?

As always with unixes and bsds, you always have more than one way to do
things. It always boil down to which one suits you. Probably in the OP
case he only want to have statistics. And implement a radius solution
would be killing a fly with a nuke. But it won't hurt to mention what he
has the possibility to do.

Cheers,

-- 
Giancarlo Razzolini
GPG: 4096R/77B981BC

Reply via email to