[prev in list] [next in list] [prev in thread] [next in thread]
List: freeradius-users
Subject: RE: Radreply Implementation Question
From: "Deramus, Chris" <Chris.Deramus () hq ! doe ! gov>
Date: 2004-01-30 14:16:02
Message-ID: 97C7EF59A387D6118A8A000802564C4604D39EBF () hqgtnexch1 ! hr ! doe ! gov
[Download RAW message or body]
Chris,
The only Cisco AV that I need sent for user's that connect with speeds less
than 128K would be CVPN3000-IPSec-IP-Compression. This needs to be sent to
the VPN Concentrator with a value of 1 for these users so that it turns
compression on. I realize those that want the compression turned on just
have to add the @realm extension; however, there are over 800 dial-in users
in our community. The more transparent it can for these users the better.
Thanks so much Chris.
Chris DeRamus
OCIO VPN Administrator
SAIC
-----Original Message-----
From: Chris Parker [mailto:cparker@starnetusa.net]
Sent: Thursday, January 29, 2004 2:33 PM
To: freeradius-users@lists.freeradius.org
Subject: RE: Radreply Implementation Question
At 01:12 PM 1/29/2004, Deramus, Chris wrote:
>Thanks for your response Chris. We have thousands of users so having
>them
>login with different usernames probably will not be an option. The only
>value that I could find that may work would be the Connect-Info
>atttribute; however, I am still a little confused at how it would be
>implemented?
The different username option is not a one or the other. It can be setup so
that the user can login either as 'user' or 'user@realm'. If they all login
with 'user' today, then they all keep doing that. The ones that care can
login with 'user@realm' to trigger the compression.
Regarding the Connect-Info, what are the attribute values that you see being
sent for the different connection types?
-Chris
--
\\\|||/// \ StarNet Inc. \ Chris Parker
\ ~ ~ / \ WX *is* Wireless! \ Director, Engineering
| @ @ | \ http://www.starnetwx.net \ (847) 963-0116
oOo---(_)---oOo--\------------------------------------------------------
\ Wholesale Internet Services - http://www.megapop.net
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
[Attachment #3 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: Radreply Implementation Question</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>Chris,</FONT>
</P>
<P><FONT SIZE=2>The only Cisco AV that I need sent for user's that connect with \
speeds less than 128K would be CVPN3000-IPSec-IP-Compression. This needs to be sent \
to the VPN Concentrator with a value of 1 for these users so that it turns \
compression on. I realize those that want the compression turned on just have to add \
the @realm extension; however, there are over 800 dial-in users in our community. The \
more transparent it can for these users the better. Thanks so much Chris.</FONT></P>
<P><FONT SIZE=2>Chris DeRamus</FONT>
<BR><FONT SIZE=2>OCIO VPN Administrator</FONT>
<BR><FONT SIZE=2>SAIC</FONT>
</P>
<BR>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Chris Parker [<A \
HREF="mailto:cparker@starnetusa.net">mailto:cparker@starnetusa.net</A>] </FONT> \
<BR><FONT SIZE=2>Sent: Thursday, January 29, 2004 2:33 PM</FONT> <BR><FONT SIZE=2>To: \
freeradius-users@lists.freeradius.org</FONT> <BR><FONT SIZE=2>Subject: RE: Radreply \
Implementation Question</FONT> </P>
<BR>
<P><FONT SIZE=2>At 01:12 PM 1/29/2004, Deramus, Chris wrote:</FONT>
</P>
<P><FONT SIZE=2>>Thanks for your response Chris. We have thousands of users so \
having </FONT> <BR><FONT SIZE=2>>them</FONT>
<BR><FONT SIZE=2>>login with different usernames probably will not be an option. \
The only </FONT> <BR><FONT SIZE=2>>value that I could find that may work would be \
the Connect-Info </FONT> <BR><FONT SIZE=2>>atttribute; however, I am still a \
little confused at how it would be </FONT> <BR><FONT SIZE=2>>implemented?</FONT>
</P>
<P><FONT SIZE=2>The different username option is not a one or the other. It can \
be setup so that the user can login either as 'user' or 'user@realm'. If they \
all login with 'user' today, then they all keep doing that. The ones that care \
can login with 'user@realm' to trigger the compression.</FONT></P>
<P><FONT SIZE=2>Regarding the Connect-Info, what are the attribute values that you \
see being sent for the different connection types?</FONT> </P>
<P><FONT SIZE=2>-Chris</FONT>
<BR><FONT SIZE=2>--</FONT>
<BR><FONT SIZE=2> \\\|||/// \
\ StarNet \
Inc. \ \
Chris Parker</FONT> <BR><FONT SIZE=2> \ ~ ~ \
/ \ WX *is* \
Wireless! \ Director, Engineering</FONT> <BR><FONT \
SIZE=2> | @ @ | \ <A \
HREF="http://www.starnetwx.net" TARGET="_blank">http://www.starnetwx.net</A> \
\ (847) 963-0116</FONT> <BR><FONT \
SIZE=2>oOo---(_)---oOo--\------------------------------------------------------</FONT>
<BR><FONT SIZE=2> \
\ Wholesale Internet Services - <A HREF="http://www.megapop.net" \
TARGET="_blank">http://www.megapop.net</A></FONT> </P>
<BR>
<BR>
<P><FONT SIZE=2>- </FONT>
<BR><FONT SIZE=2>List info/subscribe/unsubscribe? See <A \
HREF="http://www.freeradius.org/list/users.html" \
TARGET="_blank">http://www.freeradius.org/list/users.html</A></FONT> </P>
</BODY>
</HTML>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic