Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Limiting Users

At 10:29 AM 8/18/97 -0600, Jim Hribnak wrote:
>
>On Mon, 18 Aug 1997, root wrote:
>
>> Is there a way in RADIUS to allow a user to dialup via modem, make a PPP
>> connection, but not be allowed out to surf the Web.  I want to give users
>> extra email boxes for their family, but I want them to only be able to
>> check email.  The problem is, that I do not want to force them to use
>> Pine, Elm, or something like that, I want to allow them to use PPP and
>> Eudora if they desire, but do not want to allow them to get to the
>> Internet outside my network since it is supposed to be just a email
>> account?
>> 
>> Thanks in advance,
>> 
>> Jim
>
>Not sure if it is possible on an Ascend unit I have never gotten a clear
>answer from Ascend. 

>From who ? What was not clear ? 

Filters in RADIUS, per-user can provide all the control you need (for this
case at least)...

>There is a radius Attribute that relates to Filters, we have it setup on
>our pm2e's, pm3's and our USR Total control chassis.  A user will have a
>filter name associated with their radius account and when they login the
>filter is applied to their channel and viola you can limit what the user
>does..  We have the following:
>
>nomail ->  Demo accounts no access to any SMTP, POP3 and IMAP
>wwwmail->  Email only accounts (pop3) and they can browse our web site
>           only
>expired->  Expired users can only access our web site for purchasing more
>           time. and must re-logon when done

That's nice....with Ascend RADIUS, or AAC, you would specify the filter
details
in the users profile....

>The possibilites are endless!!!
>
>ON the livingston side we use ChoiceNet (runs on UNIX) and does the
>Dynamic filter implementation and has other possibilties than just
>refusing certain port from being connected.. It allows sitelists (denied
>or acceptable) plus a range of other possibilities
>
>On our USR chassis we have just the filters right onthe usr itself.. when
>a user logs on it checks and implements the right filter.. works great!
>
>Jim
>
>
>++ Ascend Users Mailing List ++
>To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
>To get FAQ'd:	<http://www.nealis.net/ascend/faq>
>

Kevin

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
References: