Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) radius menus without ascend-menu-item (fwd)

Once upon a time Tim Basher shaped the electrons to say...
>An Access-Challenge with Reply-Message attributes does not have the same
>functionality as the Ascend-Menu-Item.

Sounded to me like what was being asked as for dialin user menus.

>I am curious to know how you would accomplish the equivalent of the
>following functionality in a vendor neutral way using only the RFC
>Access-Challenge with RFC Reply-Message attributes.

You wouldn't.  Most products deal with this by having some kind of 'show
only' user who can execute such commands but not set anything.  Cisco has
several levels, Lucent has Admin-User and NAS-Prompt-User - the first is
the same as root, the second has only viewing privs and cannot change
a config.  A lot more flexible then menu choices.

Of course, Ascend could also do this in an RFC valid way - like using a
VSA instead of a bogus attribute number.

Actually, for that matter, they COULD use Reply-Message and use the same
format - just have the MAX recognize the format of the string.  Because
Reply-Message MAY be shown to the user - it doesn't have to be.  It can be
ignored, or the NAS could use it to cause other behavior - like doing this
menu.  Of course, the drawback here is a mixed NAS environment when other
products would display the text.  So a VSA would be a better choice, if
this is truly needed.

For being able to choose between dialin services, anything that is a valid
RADIUS user profile can be a choice on a RADIUS menu.

-MZ
-- 
<URL:mailto:megazone@megazone.org> Gweep, Discordian, Author, Engineer, me..
Join ISP/C Internet Service Providers' Consortium <URL:http://www.ispc.org/>
"A little nonsense now and then, is relished by the wisest men" 781-788-0130
<URL:http://www.megazone.org/>  <URL:http://www.gweep.net/>  Hail Discordia!
 ====================================================================
 ISPF, The Forum for ISPs by ISPs.  October 26-28, 1998, Atlanta, GA.
  Three days of clues, news, and views from the industry's best and
  brightest. http://www.ispf.com/ for information and registration.
 ====================================================================


++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>