Hey,

We are trying to setup a filter to work w/Radius to allow for a group that has email as the only service!
This is what we have put together as of now... we haven't tried it yet but just wanted to know if anyone
could tell if it would work make sense to work!! :)

# Default Dial-Up PPP EMAIL ONLY User System Profile
DEFAULT Auth-Type = System, NAS-Port-Type = Async, Group = email,
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 255.255.255.254,
Framed-IP-Netmask = 255.255.255.255,
cisco-avpair = "lcp:interface-config=ip policy route-map email",
Filter-Id = "email.sec",
Port-Limit = 1,
Idle-Timeout = 1200,
Session-Timeout = 28800,
Class = email


On the RAS BOX

ip policy route-map email
route-map email permit 10
match ip address 103

access-list 103 permit tcp any any eq 25
access-list 103 permit udp any any eq 53
access-list 103 permit tcp any any eq 110
access-list 103 permit tcp any any eq 113
access-list 103 deny any any

Let me know what you think!

Thanks,
Emily Whitworth


Reply via email to