(RADIATOR) Re: Radius packet or server attack protection.

[Hugh Irvine]

Hello Balgaa -

On Mon, 28 Jan 2002 21:16, User BALGAA System Engineer wrote:
> Hugh,
>
> Some of our dial-up users complain about someone using they username and
> password.
>
> How can I to secure and protect from such attacks and hacking?
>
> Now Radiator AAA server (2.19) and NAS's (AS5300,AS5400,Ascend MAX 4060)
> same subnet.
>

If the customers are always calling from the same telephone number, you can 
use a Calling-Station-Id check item.

Here is an example:

someuser  Calling-Station-Id = 22223333, Password = ......
	.......

This user would then only be able to connect from 22223333.

regards

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.