Hello Raymond -
On Thu, 17 Feb 2000, Raymond Brighenti wrote:
> > > I've been trying to figure out if I can do this within Platypus using
> > > the RadiusNT scripts or not. Any hints, tips, pointers, ideas, etc.
> > > would be greatly appreciated.
> > >
> >
> >If you can identify these customers in Radiator, you can set up a check
> >item of
> >Time = "Wk0600-1800" and a reply item of Session-Timeout = "until 1800". That
> >way they can only log in between the hours of 6am-6pm, Monday to Friday and no
> >matter what time they actually get on, their session will always terminate at
> >1800. You could do this sort of thing with a Handler that looked for a
> >particular Called-Station-Id for example.
>
> Something like this will work to prevent them from logging in, but it ain't
> going to stop their equipment from dialing in, and if their equipment is
> set to keep the link up they'll keep trying which can result in a big
> Telstra bill. I'm not saying you should leave them on all the time, but I
> would go with charging them for hours no between the correct hours as it
> might not reflect to well on your business (yes I know you have told them
> but you know customers :)
>
> One thing I thought of (If your NAS supports it) is if you're using an
> OnRamp10/20/30 service and have some spare numbers, make these customers
> dial into a different number (ie your main number is 0255558000 get them to
> call 0255558005) use DNIS in your Radius profile so that these customers
> can only dial in on on 0255558005.
>
> Then find the SNMP command to set the NAS to accept calls on this number
> and how to make it Busy out calls to that number (Ascend Maxs have a DNIS
> option like this to limit certain calls ie Modem/ISDN/etc and number of
> those calls, no idea if it's changeable by SNMP though).
>
> Then on one of your machines create a script to run this SNMP command and
> stick it in CRON to happen at 6am to allow calls and 6pm to reject all
> calls. This way they get busied out and no charge!
>
A better way to do this is as follows: this assumes your NAS can be configured
to send an initial Radius request with the Called-Station-Id and
Calling-Station-Id before answering the call (yes some NAS's support this).
Then check the numbers as I suggested previously in Radiator, and that way you
don't have to do anything with scripts or anything else - you just answer or
not depending on the time.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
