Hello Nikos -
On Thu, 27 Apr 2000, Nikos Aslanakis wrote:
> Hi Hugh,
>
> We have a serious problem regarding ISDN port check on Ciscos by Radiator.
>
> As an ISP, we have to provide 128k ISDN connections to our customers. To
> open a 128k ISDN connection, the user first opens the first 64k channel,
> authenticates once, and then opens the second 64k channel, doing a second
> authentication. This is a procedure that relies heavily on being sure about
> how many simultaneous connections a user has open on a given time. Because,
> if the system thinks a user is already connected it won't let him open the
> second 64k channel, and if the system thinks a 64k user isn't connected it
> will let him connect at 128k! If we do not check the simultaneous sessions,
> then all ISDN users will connect at 128k.
>
> Here is where NAS double checking features comes in hand. The problem with
> Ciscos is that the ISDN ports (ranging from 20000 to 20xxx) cannot be double
> checked using SNMP, in contrast with the normal PSTN ports (1-xxx). So we
> cannot guarantee that a user will connect at the right speed, because some
> times Radiator looses the count of simultaneous user sessions.
>
> The point is:
> Is it possible for you to make Radiator check for simultaneous logins using
> finger instead of SNMP?
> Or, is there another solution to this problem that someone else has
> implemented successfuly?
>
There are a couple of things to do: first upgrade to Radiator 2.15 and download
the file "hooks.txt" from the patches area. There is an example hook therein
that modifies the NAS-Port attribute that may be helpful. There has also been
some discussion on the list fairly recently, regarding the correct translations
for various versions of Cisco IOS. Check the mail archive site and do a search.
http://www.starport.net/~radiator
This probem has certainly been addressed, but it is impossible to keep up with
all the changes in Cisco (and other vendors) radius and SNMP implementations.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
