I think, RADIUS should accept following attributes:
1) Login IP address (private address, for mapping NAT 1:1)
2) Framed IP address (public address, if NAT 1:1 is required)
3) Downstream speed (for speed limit, of course, VPP should work as speed
shaper, or NAT plugin should work with speed shaper)
4) Upstream speed (according to the above-mentioned)
5) State (allow, disallow) for next actions:
5.1 - redirect to another host:port (if we are talking about ISP, for redirect
to a host with http page with payment)
5.2 - allow NAT to limited ip list
Yep, i understand, this difficult, but this is not so bad idea for
authentication, let me know if anybody know best idea to authenicate client :)