Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) Limiting Users
On Mon, 18 Aug 1997, root wrote:
> Is there a way in RADIUS to allow a user to dialup via modem, make a PPP
> connection, but not be allowed out to surf the Web. I want to give users
> extra email boxes for their family, but I want them to only be able to
> check email. The problem is, that I do not want to force them to use
> Pine, Elm, or something like that, I want to allow them to use PPP and
> Eudora if they desire, but do not want to allow them to get to the
> Internet outside my network since it is supposed to be just a email
> account?
>
> Thanks in advance,
>
> Jim
Not sure if it is possible on an Ascend unit I have never gotten a clear
answer from Ascend.
There is a radius Attribute that relates to Filters, we have it setup on
our pm2e's, pm3's and our USR Total control chassis. A user will have a
filter name associated with their radius account and when they login the
filter is applied to their channel and viola you can limit what the user
does.. We have the following:
nomail -> Demo accounts no access to any SMTP, POP3 and IMAP
wwwmail-> Email only accounts (pop3) and they can browse our web site
only
expired-> Expired users can only access our web site for purchasing more
time. and must re-logon when done
The possibilites are endless!!!
ON the livingston side we use ChoiceNet (runs on UNIX) and does the
Dynamic filter implementation and has other possibilties than just
refusing certain port from being connected.. It allows sitelists (denied
or acceptable) plus a range of other possibilities
On our USR chassis we have just the filters right onthe usr itself.. when
a user logs on it checks and implements the right filter.. works great!
Jim
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
Follow-Ups:
References: