Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Restricting login speed (fwd)



> Folks-  the MAX does sent Connect-Info does it not?

No, the MAX does not send Connect-Info.  Ascend uses the Ascend-Data-Rate
and Ascend-Xmit-Rate attributes to record the connection speed information.

Neither Ascend-Data-Rate nor Ascend-Xmit-Rate are included in Access-Request
messages, only in Accounting-Request messages.

> Connect-Info contains the connect speed, or it should according to the RFC.

Connect-Info is not part of either RFC 2138 or RFC 2139.  Connect-Info is
only part of the RADIUS Extensions INTERNET-DRAFT (draft-ietf-radius-ext-*)
and is not standard yet.

Before the last RADIUS-WG meeting, it was proposed on the mailing list that
the format of the Connect-Info string should be changed, so the hack of
trying to parse the Connect-Info to get the connection speed may disappear.

It is not clear to me that the hack is a good hack since with 56K modems,
you do not have a single connect speed, you clearly have two speeds that
will not be the same (56K is asymmetric).

It is not clear to me that using the "Connect-Info" will do any good in
restricting the transmission speed anyway, since most (all?) modems now
support renegotiation after a connection is made.  So the tricky user 
could just connect at 14.4K and then boost to 56K after authentication.

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>