Re: [RadiusNT] ISDN

Dale E. Reed Jr. ( (no email) )
Wed, 09 Dec 1998 13:13:52 -0800

Ben Conner wrote:
>
> >You should make sure the Port-Limit is set to that value as well. With
> >the new simulataneous bonding, people can bond multiple channels before
> >the first accounting record comes in (especially with ISDN).
>
> What happens if they aren't authorized for 2 channels? Do they get
> disconnected or is the protocol smart enough to send back a 'drop 1 channel'
> command?

RadiusNT must receive the first accounting start record BEFORE it
receives
the second authentication to prevent concurrency control. If Both auths
comes through before the first accounting, then they get two channels.
However, if you include the Port-Limit = 1 in the authentication, then
the
terminal server can prevent the second channel from bonding. Therefore,
you need both to be completely effective.

If you don't include the Port-limit attribute, the terminal server
doesn't have a clue about their limit, and can therefore do nothing
about it.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com