[RadiusNT Digest]

radiusnt-digest-request@iea-software.com
Thu, 23 Jul 1998 00:00:58 -0700

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Previous message: Dale E. Reed Jr.: "Re: Need to clear Call table"
Next message: Mohammed Ersan: "Re: Cisco filters and IP Pool"

Message 1: Cisco filters and IP Pool
from "Mohammed Ersan" <ersan@first.net.jo>

Message 2: Need to clear Call table
from Mark Colasante <mcola@exchange.netexp.net>

Message 3: Re: Basic Radius Setup
from Mike Rabaut <rabaut@hcc.cc.fl.us>

Message 4: Re: Basic Radius Setup
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 5: Re: Need to clear Call table
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 6: RE: Need to clear Call table
from Mark Colasante <mcola@exchange.netexp.net>

Message 7: Re: Cisco filters and IP Pool
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 8: ServerPort Table
from Mark Tran <mpt@pop.gdex.net>

Message 9: Re: ServerPort Table
from Ted Olson <tolson@ocsnet.net>

Message 10: Re: Need to clear Call table
from "Dale E. Reed Jr." <daler@iea-software.com>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 1 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Cisco filters and IP Pool
From: "Mohammed Ersan" <ersan@first.net.jo>
Date: Wed, 22 Jul 1998 10:39:33 +0300

hi,

we have a number Portmasters + Cisco 3640 working as Access Servers for Local and remote sites, on the Cisco I've created the required filters (same names on the PM & Cisco) but how do I make radius to assign the filter on the cisco and how could i prevent some one from assigning his address because if a dial-in user assigns his address he will be authenticated normally.....

<center>Mohammed Ersan

ersan@first.net.jo

firstnet

</center>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 2 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Need to clear Call table
From: Mark Colasante <mcola@exchange.netexp.net>
Date: Wed, 22 Jul 1998 12:41:24 -0400

My Calls table is so large right now that a query to it times out. Can
I just truncate the Calls table or will this cause problems? Does
anyone have any stored procs they use to keep only a certain amount of
call history? If so would you be willing to share those procedures?

Thanks,

Mark Colasante
NetExpress

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 3 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: Basic Radius Setup
From: Mike Rabaut <rabaut@hcc.cc.fl.us>
Date: Wed, 22 Jul 1998 12:52:01 -0400

Please comment on this...

To make up a special account type and limit the access times say from 5pm to
10pm, I would have to:

Have Manual Calls Update and Concurrencty Control checked in th Admin window.

Make sure that the ServerAccess table has all of the ports available listed
for the ServerID.

Create a new account type in the account type table.

Create a user account in the MasterAccount and SubAccount tables adding the
new account type to this user profile in the SubAccount table.

Populate the Server Access Table with the ServerID and all ports for that
server.

Add the new account type and the StartTime and StopTime (In what format????)
to a given port in the Server Access Table. I could have multiple account
types for a given port using duplicate port entries.

Is this correct??

Your comments would be appreciated.

thanks

Mike

rabaut@hcc.cc.fl.us
Hillsborough Community College
Ybor Campus
P.O. Box 5096
Tampa, Fl 33675-05096

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 4 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: Basic Radius Setup
From: "Dale E. Reed Jr." <daler@iea-software.com>
Date: Wed, 22 Jul 1998 11:02:48 -0700

Mike Rabaut wrote:
>
> To make up a special account type and limit the access times say from 5pm to
> 10pm, I would have to:
>
> Have Manual Calls Update and Concurrencty Control checked in th Admin window.

Concurrency control isn't relevant to ServerPortAccess (which is where the
time restrictions are).

> Make sure that the ServerAccess table has all of the ports available listed
> for the ServerID.
>
> Create a new account type in the account type table.
>
> Create a user account in the MasterAccount and SubAccount tables adding the
> new account type to this user profile in the SubAccount table.
>
> Populate the Server Access Table with the ServerID and all ports for that
> server.
>
> Add the new account type and the StartTime and StopTime (In what format????)

Minutes past midnight. ie, 7am is 7 * 60 or 420.

> to a given port in the Server Access Table. I could have multiple account
> types for a given port using duplicate port entries.
>
> Is this correct??

When you enable Server Port Access, all account types are denied by default.
Therefore, you MUST add entries for each account type for each server (or
port). I believe 2.5 supports a NULL for the server port, which makes it
easier to populate the ServerAccess table.

Lets say you have three account types, PPP, PPP Business, PPP After Hours.
The first is full acccess, while the other two are daytime and night time
access, respectively. Your ServerAccess table might look like this (assuming
you have two nases, ServerID 1 and 2):

ServerID Port Account Type StartTime StopTime
-------- ------ --------------- --------- --------
1 (NULL) PPP 0 0
1 (NULL) PPP Business 420 1080
1 (NULL) PPP After Hrs 1080 480
2 (NULL) PPP 0 0
2 (NULL) PPP Business 420 1080
2 (NULL) PPP After Hrs 1080 480

This would allow the PPP users to call any time w/out restrictions. The
PPP business could call from 7am to 6pm, and the PPP After Hrs can call
from 6pm to 7am.

BTW, the (NULL) isn't a string. In MS Access, just clear the cell and it will
be NULL. For SQL Server, set it to the word NULL (Port=NULL).

-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 5 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Need to clear Call tableFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Wed, 22 Jul 1998 11:07:50 -0700

Mark Colasante wrote:> > My Calls table is so large right now that a query to it times out. Can> I just truncate the Calls table or will this cause problems? Does> anyone have any stored procs they use to keep only a certain amount of> call history? If so would you be willing to share those procedures?

Initially, you might want to clean it up by hand. The best way todo this is just use a statement like this:

Delete From CallsWhere CallDate < '6/1/98'

and then increment the date up and execute it again. Try and only do smallpieces at a time. Eventually, you can use a statement like this in SQL Executive (running nightly or weekly) to trim out the records:

Delete From CallsWhere DateDiff(Month, CallDate, GetDate()) > 2

This would delete all records older than 2 months.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 6 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: Need to clear Call tableFrom: Mark Colasante <mcola@exchange.netexp.net>Date: Wed, 22 Jul 1998 14:30:48 -0400

Thanks Dale. I will use these ideas once things are under control.Problem is that my SQL server won't run any type of query against thecalls table because it times out and also says that there are too manyhandles or locks or something to that effect. Are there any foreignkeys reference in the Calls table? If not, then shouldn't I just beable to truncate the table?

Thanks,

Mark ColasanteNetExpress

-----Original Message-----From: Dale E. Reed Jr. [mailto:daler@iea-software.com]Sent: Wednesday, July 22, 1998 2:08 PMTo: radiusnt@iea-software.comSubject: Re: Need to clear Call table

Mark Colasante wrote:> > My Calls table is so large right now that a query to it times out.Can> I just truncate the Calls table or will this cause problems? Does> anyone have any stored procs they use to keep only a certain amount of> call history? If so would you be willing to share those procedures?

Initially, you might want to clean it up by hand. The best way todo this is just use a statement like this:

Delete From CallsWhere CallDate < '6/1/98'

and then increment the date up and execute it again. Try and only dosmallpieces at a time. Eventually, you can use a statement like this in SQL Executive (running nightly or weekly) to trim out the records:

Delete From CallsWhere DateDiff(Month, CallDate, GetDate()) > 2

This would delete all records older than 2 months.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 7 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Cisco filters and IP PoolFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Wed, 22 Jul 1998 11:25:58 -0700

Mohammed Ersan wrote:> > we have a number Portmasters + Cisco 3640 working as Access Servers for > Local and remote sites, on the Cisco I've created the required filters > (same names on the PM & Cisco) but how do I make radius to assign the > filter on the cisco and how could i prevent some one from assigning his> address because if a dial-in user assigns his address he will be > authenticated normally.....

To assign the filter in RadiusNT (assuming ODBC Mode) you need to add theFramed-Filter attribute to the AccountType defaults in the RadATConfigstable (or to the specific users's accountID in the RadConfigs Table).

I'm really not sure what you are asking in the second part about "assigning his address" and "authenticated normally".

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 8 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: ServerPort TableFrom: Mark Tran <mpt@pop.gdex.net>Date: Wed, 22 Jul 1998 20:30:51 GMT

I'm running Radius NT under MS Access database. I got the ServerPorts table populated with ServerID and port number for each of the ports on that server. I have concurrency and manual calls update checked from RAdius Admin menu. However, the online calls feature is still not working. I can not view who's online or how much time they spend online. Do I need to put anything in the "IP Address", "call update" or "FramedAddress" field of the ServerPort table? Do I need to put anything in the "Calls" table. Please give me some advice.Thanks.Mark.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 9 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: ServerPort TableFrom: Ted Olson <tolson@ocsnet.net>Date: Wed, 22 Jul 1998 14:52:26 -0700

At 08:30 PM 7/22/98 GMT, you wrote:>I'm running Radius NT under MS Access database. I got the ServerPortstable populated with ServerID and port number for each of the ports on thatserver. I have concurrency and manual calls update checked from RAdiusAdmin menu. However, the online calls feature is still not working. I cannot view who's online or how much time they spend online.

>Do I need to put anything in the "IP Address", "call update" or"FramedAddress" field of the ServerPort table?

These fields in ServerPorts are populated automatically when you enablemanual calls update, all you have to enter first is the ServerID and portnumbers.

>Do I need to put anything in the "Calls" table.

No, it is also populated automatically.

>Please give me some advice.>>Thanks.>Mark.

You should have a query named "CallsOnline" - just run it. You might checkfirst to make sure the records you set up in ServerPorts are being filledin, since if there are no "1" records there the query won't find any results.

hth,Ted OlsonOCS Software

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 10 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Need to clear Call tableFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Wed, 22 Jul 1998 15:15:13 -0700

Mark Colasante wrote:> > Thanks Dale. I will use these ideas once things are under control.> Problem is that my SQL server won't run any type of query against the> calls table because it times out and also says that there are too many> handles or locks or something to that effect. Are there any foreign> keys reference in the Calls table? If not, then shouldn't I just be> able to truncate the table?

There are no foreign keys, so you can use the truncate table commandif you want.

Previous message: Dale E. Reed Jr.: "Re: Need to clear Call table"
Next message: Mohammed Ersan: "Re: Cisco filters and IP Pool"