(RADIATOR) How to restrict Multilink dial-in

Thu May 8 11:55:57 CDT 2003

Hello,

I use Radiator 3.5 with MySQL. I would like to restrict multilink access for
certain users. How can I do this? Below you will find a piece from my logs,
wich is a multilink dial-in call.

I want to "say" to the Ascend NAS that the user may have a maximum of 1
channel. How to do this?

Please help me. Thank you in advance.

Best regards,
Marcel

------------------

Thu May 8 18:40:07 2003: DEBUG: Packet dump:
*** Received from xxx.xxx.xxx.xxx port 1645 ....

Packet length = 132
01 88 00 84 83 91 2d 69 5f a8 8e 31 65 fb ab ae
c5 1b 95 6f 04 06 3e 3a 3a 36 05 06 00 00 00 02
1a 17 00 00 00 09 02 11 56 69 72 74 75 61 6c 2d
41 63 63 65 73 73 32 3d 06 00 00 00 05 01 09 6d
61 72 63 65 6c 73 1e 0b 36 37 36 30 38 37 32 34
38 1f 0b 32 39 37 33 34 37 33 30 37 02 12 1c dc
9b 19 b1 23 35 97 5d f4 17 6d 37 f4 0d 9b 06 06
00 00 00 02 07 06 00 00 00 01 2c 0a 30 30 30 30
30 31 32 41
Code: Access-Request
Identifier: 136
Authentic: <131><145>-i_<168><142>1e<251><171><174><197><27><149>o
Attributes:
NAS-IP-Address = xxx.xxx.xxx.xxx
NAS-Port = 2
Cisco-NAS-Port = "Virtual-Access2"
NAS-Port-Type = Virtual
User-Name = "xxxxxxx"
Called-Station-Id = "xxxxxxx"
Calling-Station-Id = "xxxxxxx"
User-Password = "xxxxxxx"
Service-Type = Framed-User
Framed-Protocol = PPP
Acct-Session-Id = "0000012A"

Thu May 8 18:40:07 2003: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Thu May 8 18:40:07 2003: DEBUG: Rewrote user name to xxxxxxx
Thu May 8 18:40:07 2003: DEBUG: Sessions Deleting session for xxxxxxx,
xxx.xxx.xxx.xxx, 2
Thu May 8 18:40:07 2003: DEBUG: do query is: DELETE FROM RADONLINE WHERE
USERNAME = 'xxxxxxx'

Thu May 8 18:40:07 2003: DEBUG: Handling with Radius::AuthSQL
Thu May 8 18:40:07 2003: DEBUG: Handling with Radius::AuthSQL: AuthBySql
Thu May 8 18:40:07 2003: DEBUG: Query is: SELECT PASSWORD, CHECKATTR,
REPLYATTR FROM SUBSCRIBERS WHERE USERNAME='xxxxxxx' AND 20030508 BETWEEN
ACTIVEFROM AND ACTIVEUNTIL

Thu May 8 18:40:07 2003: DEBUG: Radius::AuthSQL looks for match with xxxxxxx
Thu May 8 18:40:07 2003: DEBUG: Query is: SELECT NASIDENTIFIER, NASPORT,
ACCTSESSIONID FROM RADONLINE WHERE USERNAME = 'xxxxxxx'

Thu May 8 18:40:07 2003: DEBUG: Radius::AuthSQL ACCEPT:
Thu May 8 18:40:07 2003: DEBUG: Access accepted for xxxxxxx
Thu May 8 18:40:07 2003: DEBUG: Packet dump:
*** Sending to xxx.xxx.xxx.xxx port 1645 ....

Packet length = 44
02 88 00 2c ed 3f 99 d8 f7 6d 66 3c 1b b6 20 9b
c3 48 4c a4 06 06 00 00 00 02 07 06 00 00 00 01
0c 06 00 00 05 dc 0d 06 00 00 00 01
Code: Access-Accept
Identifier: 136
Authentic: <131><145>-i_<168><142>1e<251><171><174><197><27><149>o
Attributes:
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-MTU = 1500
Framed-Compression = Van-Jacobson-TCP-IP

Thu May 8 18:40:08 2003: DEBUG: Packet dump:
*** Received from xxx.xxx.xxx.xxx port 1646 ....

Packet length = 160
04 89 00 a0 49 86 b1 fe b1 74 55 73 27 20 f7 42
7e e8 1a a0 04 06 3e 3a 3a 36 05 06 00 00 00 02
1a 17 00 00 00 09 02 11 56 69 72 74 75 61 6c 2d
41 63 63 65 73 73 32 3d 06 00 00 00 05 01 09 6d
61 72 63 65 6c 73 1e 0b 36 37 36 30 38 37 32 34
38 1f 0b 32 39 37 33 34 37 33 30 37 28 06 00 00
00 01 2d 06 00 00 00 01 06 06 00 00 00 02 2c 0a
30 30 30 30 30 31 32 41 07 06 00 00 00 01 33 06
00 00 00 01 bc 06 00 00 00 01 32 04 38 00 08 06
d4 13 e8 03 bb 06 00 00 00 08 29 06 00 00 00 00
Code: Accounting-Request
Identifier: 137
Authentic: I<134><177><254><177>tUs' <247>B~<232><26><160>
Attributes:
NAS-IP-Address = xxx.xxx.xxx.xxx
NAS-Port = 2
Cisco-NAS-Port = "Virtual-Access2"
NAS-Port-Type = Virtual
User-Name = "xxxxxxx"
Called-Station-Id = "xxxxxxx"
Calling-Station-Id = "xxxxxxx"
Acct-Status-Type = Start
Acct-Authentic = RADIUS
Service-Type = Framed-User
Acct-Session-Id = "0000012A"
Framed-Protocol = PPP
Acct-Link-Count = 1
Ascend-Num-In-Multilink = 1
Acct-Multi-Session-Id = "8"
Framed-IP-Address = xxx.xxx.xxx.xxx
Ascend-Multilink-ID = 8
Acct-Delay-Time = 0

Thu May 8 18:40:08 2003: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Thu May 8 18:40:08 2003: DEBUG: Rewrote user name to xxxxxxx
Thu May 8 18:40:08 2003: DEBUG: Sessions Adding session for xxxxxxx,
xxx.xxx.xxx.xxx, 2
Thu May 8 18:40:08 2003: DEBUG: do query is: DELETE FROM RADONLINE WHERE
USERNAME = 'xxxxxxx'

Thu May 8 18:40:08 2003: DEBUG: do query is: INSERT INTO RADONLINE (
USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP,
FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID,
CALLEDSTATIONID, MULTILINK ) VALUES ( 'xxxxxxx', 'xxx.xxx.xxx.xxx', 2,
'0000012A', 1052412008, 'xxx.xxx.xxx.xxx', '1', '1', 'xxxxxxx', 'xxxxxxx',
'' )

Thu May 8 18:40:08 2003: DEBUG: Handling with Radius::AuthSQL
Thu May 8 18:40:08 2003: DEBUG: Handling accounting with Radius::AuthSQL
Thu May 8 18:40:08 2003: DEBUG: Accounting accepted
Thu May 8 18:40:08 2003: DEBUG: Packet dump:
*** Sending to xxx.xxx.xxx.xxx port 1646 ....

Packet length = 20
05 89 00 14 a5 88 9e 4f 5b 3b 38 23 39 a6 bc 2b
2e da 4e 39
Code: Accounting-Response
Identifier: 137
Authentic: I<134><177><254><177>tUs' <247>B~<232><26><160>
Attributes:

Thu May 8 18:40:08 2003: DEBUG: Packet dump:
*** Received from xxx.xxx.xxx.xxx port 1645 ....

Packet length = 132
01 8a 00 84 ab 88 13 33 c4 74 31 43 38 de 2b 83
29 52 df b7 04 06 3e 3a 3a 36 05 06 00 00 00 01
1a 17 00 00 00 09 02 11 56 69 72 74 75 61 6c 2d
41 63 63 65 73 73 31 3d 06 00 00 00 05 01 09 6d
61 72 63 65 6c 73 1e 0b 36 37 36 30 38 37 32 34
38 1f 0b 32 39 37 33 34 37 33 30 37 02 12 2d 6a
4b cd b2 5f 77 64 b0 0f c2 c8 17 fb e6 b4 06 06
00 00 00 02 07 06 00 00 00 01 2c 0a 30 30 30 30
30 31 32 43
Code: Access-Request
Identifier: 138
Authentic: <171><136><19>3<196>t1C8<222>+<131>)R<223><183>
Attributes:
NAS-IP-Address = xxx.xxx.xxx.xxx
NAS-Port = 1
Cisco-NAS-Port = "Virtual-Access1"
NAS-Port-Type = Virtual
User-Name = "xxxxxxx"
Called-Station-Id = "xxxxxxx"
Calling-Station-Id = "xxxxxxx"
User-Password = "xxxxxxx"
Service-Type = Framed-User
Framed-Protocol = PPP
Acct-Session-Id = "0000012C"

Thu May 8 18:40:08 2003: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Thu May 8 18:40:08 2003: DEBUG: Rewrote user name to xxxxxxx
Thu May 8 18:40:08 2003: DEBUG: Sessions Deleting session for xxxxxxx,
xxx.xxx.xxx.xxx, 1
Thu May 8 18:40:08 2003: DEBUG: do query is: DELETE FROM RADONLINE WHERE
USERNAME = 'xxxxxxx'

Thu May 8 18:40:08 2003: DEBUG: Handling with Radius::AuthSQL
Thu May 8 18:40:08 2003: DEBUG: Handling with Radius::AuthSQL: AuthBySql
Thu May 8 18:40:08 2003: DEBUG: Query is: SELECT PASSWORD, CHECKATTR,
REPLYATTR FROM SUBSCRIBERS WHERE USERNAME='xxxxxxx' AND 20030508 BETWEEN
ACTIVEFROM AND ACTIVEUNTIL

Thu May 8 18:40:08 2003: DEBUG: Radius::AuthSQL looks for match with xxxxxxx
Thu May 8 18:40:08 2003: DEBUG: Query is: SELECT NASIDENTIFIER, NASPORT,
ACCTSESSIONID FROM RADONLINE WHERE USERNAME = 'xxxxxxx'

Thu May 8 18:40:08 2003: DEBUG: Radius::AuthSQL ACCEPT:
Thu May 8 18:40:08 2003: DEBUG: Access accepted for xxxxxxx
Thu May 8 18:40:08 2003: DEBUG: Packet dump:
*** Sending to xxx.xxx.xxx.xxx port 1645 ....

Packet length = 44
02 8a 00 2c df 7c 4c d8 a6 4a ed d2 aa f1 33 ec
56 6e e4 26 06 06 00 00 00 02 07 06 00 00 00 01
0c 06 00 00 05 dc 0d 06 00 00 00 01
Code: Access-Accept
Identifier: 138
Authentic: <171><136><19>3<196>t1C8<222>+<131>)R<223><183>
Attributes:
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-MTU = 1500
Framed-Compression = Van-Jacobson-TCP-IP

Thu May 8 18:40:08 2003: DEBUG: Packet dump:
*** Received from xxx.xxx.xxx.xxx port 1646 ....

Packet length = 160
04 8b 00 a0 7f 9f 50 2f c5 d0 3a 57 7a fc 49 46
88 08 95 b8 04 06 3e 3a 3a 36 05 06 00 00 00 01
1a 17 00 00 00 09 02 11 56 69 72 74 75 61 6c 2d
41 63 63 65 73 73 31 3d 06 00 00 00 05 01 09 6d
61 72 63 65 6c 73 1e 0b 36 37 36 30 38 37 32 34
38 1f 0b 32 39 37 33 34 37 33 30 37 28 06 00 00
00 01 2d 06 00 00 00 01 06 06 00 00 00 02 2c 0a
30 30 30 30 30 31 32 43 07 06 00 00 00 01 33 06
00 00 00 02 bc 06 00 00 00 02 08 06 d4 13 e8 03
32 04 38 00 bb 06 00 00 00 08 29 06 00 00 00 00
Code: Accounting-Request
Identifier: 139
Authentic: <127><159>P/<197><208>:Wz<252>IF<136><8><149><184>
Attributes:
NAS-IP-Address = xx.xxx.xxx.xxx
NAS-Port = 1
Cisco-NAS-Port = "Virtual-Access1"
NAS-Port-Type = Virtual
User-Name = "xxxxxxx"
Called-Station-Id = "xxxxxxx"
Calling-Station-Id = "xxxxxxx"
Acct-Status-Type = Start
Acct-Authentic = RADIUS
Service-Type = Framed-User
Acct-Session-Id = "0000012C"
Framed-Protocol = PPP
Acct-Link-Count = 2
Ascend-Num-In-Multilink = 2
Framed-IP-Address = xxx.xxx.xxx.xxx
Acct-Multi-Session-Id = "8"
Ascend-Multilink-ID = 8
Acct-Delay-Time = 0

Thu May 8 18:40:08 2003: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Thu May 8 18:40:08 2003: DEBUG: Rewrote user name to xxxxxxx
Thu May 8 18:40:08 2003: DEBUG: Sessions Adding session for xxxxxxx,
xxx.xxx.xxx.xxx, 1
Thu May 8 18:40:08 2003: DEBUG: do query is: DELETE FROM RADONLINE WHERE
USERNAME = 'xxxxxxx'

Thu May 8 18:40:08 2003: DEBUG: do query is: INSERT INTO RADONLINE (
USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP,
FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID,
CALLEDSTATIONID, MULTILINK ) VALUES ( 'xxxxxxx', 'xxx.xxx.xxx.xxx', 1,
'0000012C', 1052412008, 'xxx.xxx.xxx.xxx', '1', '1', 'xxxxxxx', 'xxxxxxx',
'' )

Thu May 8 18:40:09 2003: DEBUG: Handling with Radius::AuthSQL
Thu May 8 18:40:09 2003: DEBUG: Handling accounting with Radius::AuthSQL
Thu May 8 18:40:09 2003: DEBUG: Accounting accepted
Thu May 8 18:40:09 2003: DEBUG: Packet dump:
*** Sending to xxx.xxx.xxx.xxx port 1646 ....

Packet length = 20
05 8b 00 14 b9 62 21 12 80 6f 4d 37 00 e8 2a ad
6e 85 87 f7
Code: Accounting-Response
Identifier: 139
Authentic: <127><159>P/<197><208>:Wz<252>IF<136><8><149><184>
Attributes:

Thu May 8 18:40:12 2003: DEBUG: Packet dump:
*** Received from xxx.xxx.xxx.xxx port 1646 ....

Packet length = 238
04 8c 00 ee 1b cb 6d bf de c4 9a 3a 99 54 66 80
2d 1c bd 21 04 06 3e 3a 3a 36 05 06 00 00 00 02
1a 17 00 00 00 09 02 11 56 69 72 74 75 61 6c 2d
41 63 63 65 73 73 32 3d 06 00 00 00 05 01 09 6d
61 72 63 65 6c 73 1e 0b 36 37 36 30 38 37 32 34
38 1f 0b 32 39 37 33 34 37 33 30 37 28 06 00 00
00 02 2d 06 00 00 00 01 06 06 00 00 00 02 2c 0a
30 30 30 30 30 31 32 41 07 06 00 00 00 01 33 06
00 00 00 02 bc 06 00 00 00 02 32 04 38 00 08 06
d4 13 e8 03 c3 06 00 00 00 2d be 06 00 00 00 94
bf 06 00 00 00 75 c0 06 00 00 00 05 c1 06 00 00
00 03 2a 06 00 00 09 c6 2b 06 00 00 08 9a 2f 06
00 00 00 25 30 06 00 00 00 17 c6 06 00 00 00 00
2e 06 00 00 00 05 c5 06 00 00 fa 00 ff 06 00 00
fa 00 bb 06 00 00 00 08 29 06 00 00 00 00
Code: Accounting-Request
Identifier: 140
Authentic: <27><203>m<191><222><196><154>:<153>Tf<128>-<28><189>!
Attributes:
NAS-IP-Address = xxx.xxx.xxx.xxx
NAS-Port = 2
Cisco-NAS-Port = "Virtual-Access2"
NAS-Port-Type = Virtual
User-Name = "xxxxxxx"
Called-Station-Id = "xxxxxxx"
Calling-Station-Id = "xxxxxxx"
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = Framed-User
Acct-Session-Id = "0000012A"
Framed-Protocol = PPP
Acct-Link-Count = 2
Ascend-Num-In-Multilink = 2
Acct-Multi-Session-Id = "8"
Framed-IP-Address = xxx.xxx.xxx.xxx
Ascend-Disconnect-Cause = 45
Ascend-Pre-Input-Octets = 148
Ascend-Pre-Output-Octets = 117
Ascend-Pre-Input-Packets = 5
Ascend-Pre-Output-Packets = 3
Acct-Input-Octets = 2502
Acct-Output-Octets = 2202
Acct-Input-Packets = 37
Acct-Output-Packets = 23
Ascend-PreSession-Time = 0
Acct-Session-Time = 5
Ascend-Data-Rate = 64000
Ascend-Xmit-Rate = 64000
Ascend-Multilink-ID = 8
Acct-Delay-Time = 0

Thu May 8 18:40:12 2003: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Thu May 8 18:40:12 2003: DEBUG: Rewrote user name to xxxxxxx
Thu May 8 18:40:12 2003: DEBUG: Sessions Deleting session for xxxxxxx,
xxx.xxx.xxx.xxx, 2
Thu May 8 18:40:12 2003: DEBUG: do query is: DELETE FROM RADONLINE WHERE
USERNAME = 'xxxxxxx'

Thu May 8 18:40:12 2003: DEBUG: Handling with Radius::AuthSQL
Thu May 8 18:40:12 2003: DEBUG: Handling accounting with Radius::AuthSQL
Thu May 8 18:40:12 2003: DEBUG: Accounting accepted
Thu May 8 18:40:12 2003: DEBUG: Packet dump:
*** Sending to xxx.xxx.xxx.xxx port 1646 ....

Packet length = 20
05 8c 00 14 ba 28 d6 34 85 68 27 80 82 31 0e df
12 a7 2d 32
Code: Accounting-Response
Identifier: 140
Authentic: <27><203>m<191><222><196><154>:<153>Tf<128>-<28><189>!
Attributes:

Thu May 8 18:40:27 2003: DEBUG: Packet dump:
*** Received from xxx.xxx.xxx.xxx port 1646 ....

Packet length = 238
04 8d 00 ee 6b 4a 43 13 75 9b 7b fa 96 81 49 85
73 3b cc 4b 04 06 3e 3a 3a 36 05 06 00 00 00 01
1a 17 00 00 00 09 02 11 56 69 72 74 75 61 6c 2d
41 63 63 65 73 73 31 3d 06 00 00 00 05 01 09 6d
61 72 63 65 6c 73 1e 0b 36 37 36 30 38 37 32 34
38 1f 0b 32 39 37 33 34 37 33 30 37 28 06 00 00
00 02 2d 06 00 00 00 01 06 06 00 00 00 02 2c 0a
30 30 30 30 30 31 32 43 07 06 00 00 00 01 33 06
00 00 00 02 bc 06 00 00 00 01 08 06 d4 13 e8 03
32 04 38 00 c3 06 00 00 00 2d be 06 00 00 00 94
bf 06 00 00 00 75 c0 06 00 00 00 05 c1 06 00 00
00 03 2a 06 00 00 11 3c 2b 06 00 00 08 34 2f 06
00 00 00 27 30 06 00 00 00 13 c6 06 00 00 00 00
2e 06 00 00 00 12 c5 06 00 00 fa 00 ff 06 00 00
fa 00 bb 06 00 00 00 08 29 06 00 00 00 00
Code: Accounting-Request
Identifier: 141
Authentic: kJC<19>u<155>{<250><150><129>I<133>s;<204>K
Attributes:
NAS-IP-Address = xxx.xxx.xxx.xxx
NAS-Port = 1
Cisco-NAS-Port = "Virtual-Access1"
NAS-Port-Type = Virtual
User-Name = "xxxxxxx"
Called-Station-Id = "xxxxxxx"
Calling-Station-Id = "xxxxxxx"
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = Framed-User
Acct-Session-Id = "0000012C"
Framed-Protocol = PPP
Acct-Link-Count = 2
Ascend-Num-In-Multilink = 1
Framed-IP-Address = xxx.xxx.xxx.xxx
Acct-Multi-Session-Id = "8"
Ascend-Disconnect-Cause = 45
Ascend-Pre-Input-Octets = 148
Ascend-Pre-Output-Octets = 117
Ascend-Pre-Input-Packets = 5
Ascend-Pre-Output-Packets = 3
Acct-Input-Octets = 4412
Acct-Output-Octets = 2100
Acct-Input-Packets = 39
Acct-Output-Packets = 19
Ascend-PreSession-Time = 0
Acct-Session-Time = 18
Ascend-Data-Rate = 64000
Ascend-Xmit-Rate = 64000
Ascend-Multilink-ID = 8
Acct-Delay-Time = 0

Thu May 8 18:40:27 2003: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Thu May 8 18:40:27 2003: DEBUG: Rewrote user name to xxxxxxx
Thu May 8 18:40:27 2003: DEBUG: Sessions Deleting session for xxxxxxx,
xxx.xxx.xxx.xxx, 1
Thu May 8 18:40:27 2003: DEBUG: do query is: DELETE FROM RADONLINE WHERE
USERNAME = 'xxxxxxx'

Thu May 8 18:40:27 2003: DEBUG: Handling with Radius::AuthSQL
Thu May 8 18:40:27 2003: DEBUG: Handling accounting with Radius::AuthSQL
Thu May 8 18:40:27 2003: DEBUG: Accounting accepted
Thu May 8 18:40:27 2003: DEBUG: Packet dump:
*** Sending to xxx.xxx.xxx.xxx port 1646 ....

Packet length = 20
05 8d 00 14 ce 22 30 68 2c 60 8b 12 5d d0 3b 51
12 2c 1c 37
Code: Accounting-Response
Identifier: 141
Authentic: kJC<19>u<155>{<250><150><129>I<133>s;<204>K
Attributes:

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.