Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Filters in Radius

At 14:27 08/13/1997 +0200, Stefan M. Brandl wrote:
>I want to setup Radius-Filters, so that some users only can access
>certain hosts.
>For example, User 'abc' can only contact host 192.168.0.1
>I created the following entry:
        [deleted]
>This works fine, but if I allow access to more than 15 hosts, the user
>can not login anymore.

do you mean 15 _seperate_ host/filter entries,
or 15 hosts in the same subnet?

ie:
        Ascend-Data-Filter = "ip out forward srcip 192.168.0.1/32",
        Ascend-Data-Filter = "ip out forward srcip 192.168.0.8/32",
        [ ... 15 or more entries ... ]
        Ascend-Data-Filter = "ip out forward srcip 192.168.0.200/32",
(there probably _IS_ a maximum number of seperate filer entries)

or:
        Ascend-Data-Filter = "ip out forward srcip 192.168.0.0/27",
(which allows the first 32 hosts in this subnet)

-Jim H
----
Jim Howard             Sr Network Engineer        Lyceum Internet
jhoward@lyceum.com     http://www.lyceum.com/     404.248.1733     

My PGP Public Key: http://www.lyceum.com/~jhoward/pgp-key.txt
Fingerprint: 7E8B E2BA 1314 2535 CB08  CFF9 119B 7CD3 2488 954D

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
Follow-Ups: