Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) ACC and time of Day....?



Have you read the Release Notes for AAC 1.0Ai10 ?

The Time-of-Day settings must be applied as a Check-Item for a
users profile.  If you want to apply the same Time-of-Day settings for
all users in a specific realm you must do so by using this setting
on the top line of all profiles
e.g.
cheapuser Password = "hardtoknow", Time-Of-Day = "Wk1800-0800|SaSu"
     Service-Type = Framed,
     Framed-Protocol = PPP,
     Ascend-Assign-IP-Pool = 1,
     Ascend-Route-IP = Route-IP-Yes,
     Framed-Routing = None

It is not possible to apply this setting globally to every user in a
specific realm
This would require an optional setting in the authfile which could be
applied to
each Realm.  There is no such option.

You can apply the Time-of-Day restrictions on a per-user basis or you can
apply it to multiple users by using the DEFAULT profile
e.g.

/etc/raddb/users

DEFAULT   Authentication-Type = Realm

/etc/raddb/authfile

work FILE      6to6

# This means that any user who logs in with a username of user@work
# will be authenticated via a local file call 6to6.users

/etc/raddb/6to6.users

DEFAULT   Authentication-Type = Unix-Pw, Time-Of-Day = "Wk0800-1800"
     Service-Type = Framed,
     Framed-Protocol = PPP,
     Ascend-Assign-IP-Pool = 1,
     Ascend-Route-IP = Route-IP-Yes,
     Framed-Routing = None

#This DEFAULT profile will only allow a user to connect between
# 8:00 AM and 6:00 PM

This method of applying the time-of day restriction might be suitable
for your needs.






"Kenneth E. Johnson" <webmaster@suite224.net> on 05/05/98 09:20:13 AM

To:   ascend-users@bungi.com
cc:
Subject:  (ASCEND) ACC and time of Day....?




We are using TNT's and Ascend Access Control for Radius...

Does anyone know of a way to create a realm and limit the times for
connecting to certain hours of the day?

Scenario:

We want to create a special business class of ISDN user who can only
connect from, say, 6am until 6pm...but lock them out at prome time so
our ports are open for residential usage.

Any thoughts?
Ken Johnson
Suite 224
++ Ascend Users Mailing List ++
To unsubscribe:     send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:  <http://www.nealis.net/ascend/faq>





++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>