Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Static IP Users


Yes it will.  We have all our maxen set to pool only = yes and static
customers will still get their proper IP's via radius.  Pool only
specifies that the MAX requires the calling station to accept the IP
address given, and if not then the call is rejected.  If the user is
authenticated via radius and their profile has their IP address in it
then that is what will be assigned to the calling station.  Pool Only = No
would allow the calling station to reject the IP assigned to it and 
then request any IP it wanted, even invalid, non-routable, or already used
IP's, which could cause anything from a DoS attack, to a combination of
DoS and spoofing attack in certain cases.

This sounds more like a routing issue than an authentication issue since
users are getting their proper IP address.

Regards,
Joe Shaw - jshaw@insync.net
NetAdmin - Insync Internet Services
"Backhoes never sleep." - Patrick Greenwell

On Tue, 25 Aug 1998, FastWave - Ascend MAX wrote:

> Check the following setting:
> 
>     Ethernet -> ModConfig -> Pool only = Yes
> 
> If set to 'yes', RADIUS will not assign static IP addresses. Change to 'No'.
> 
> Kim W. Premuda
> San Diego, CA
> 
> 
> Laurent Saehyun Kim wrote:
> 
> > Hello all,
> >
> > I just upgraded our MAXs (4004 and 6000) with 6.1.7.  I reconfigured all
> > the settings from scratch.  Since then static IP users does not work.  They
> > will connect but can't go beyond MAX.  Is there any setting that allows
> > static users in 6.1.7?
> >
> > Here is the sample RADIUS profile:
> >
> > user    Password = "UNIX"
> >         User-Service-Type = Framed-User,
> >         Framed-Protocol = PPP,
> >         Framed-Address = XXX.XXX.XXX.XXX          <- Static IP
> >         Framed-Netmask = 255.255.255.255,
> >         Framed-Routing = None,
> >         Framed-Compression = Van-Jacobsen-TCP-IP,
> >         Framed-MTU = 1500,
> >         Ascend-Maximum-Channels = 1
> >
> > Note:  The static IP is not allocated from the IP pool used by the MAX.
> > This setting worked perfectly before upgrading to 6.1.7 from 6.0.
> >
> > Thanks,
> >
> > Laurent
> > Laurent S. Kim
> > NetroPlex Internet Services
> > lshkim@netroplex.com
> > ++ Ascend Users Mailing List ++
> > To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> > To get FAQ'd:   <http://www.nealis.net/ascend/faq>
> 
> 
> 
> ++ Ascend Users Mailing List ++
> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
> 

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
Follow-Ups: References: