Re: exceptions to simultaneous use?

Sergey Poznyakoff <[email protected]> Tue, 20 Sep 2005 22:27:40 +0300

Newsgroups	gmane.comp.gnu.radius.general
Organization	Farlep-Internet
Message-ID	<[email protected]>

Kenny Dail <[email protected]> wrote:

> Is it possible to exclude a particular nas from simultaneous-use
> restrictions?

Yes, there are several ways of doing so. One of them is to use
NAS-IP-Address attribute. For example, let's suppose your NAS 
has IP 10.10.10.1 and your FTP server has IP 10.10.20.1. Then,
you would create two profiles:

# Profile for authenticating dial-up connections:
DEFAULT   NAS-IP-Address = 10.10.10.1,
	  Auth-Type = <whatever>,
		     Simultaneous-Use = 1
		     ...
	  Service-Type = ...

# Profile for authenticating FTP connections:
DEFAULT   NAS-IP-Address = 10.10.20.1,
	  Auth-Type = <whatever>
		     ...   # No Simultaneous-Use attribute
	  Service-Type = ...

Regards,
Sergey