On Mon, 6 Dec 1999, Jesse Sipprell wrote:
Until recently I had been using:
enable ip SOURCE_ADDRESS_FILTER set network user default PPP_SOURCE_IP_FILTER enabled
to prevent network users from spoofing source addresses. I now have one customer who has the need to have multiple subnets routed to them, which requires me to turn this option off globally.
Is there any method of leaving this ON, but turning off PPP_SOURCE_IP_FILTER for a specific user via RADIUS?
I don't think so................. You can use "hint assigned" and build dynamic filters for each of your users...........I did this for a time. I *really* wish they would make PPP_SOURCE_IP_FILTER use the netmask information and build the filter off that...................anyone know if this is in the pipeline?
Thanks!
-- Jesse Sipprell Technical Operations Director Evolution Communications, Inc. 800.496.4736
* Finger jss@evcom.net for my PGP Public Key *
- To unsubscribe to usr-tc, send an email to "majordomo@xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.
----------------------------------------------------- Brian Feeny (BF304) signal@shreve.net 318-222-2638 x 109 http://www.shreve.net/~signal Network Administrator ShreveNet Inc. (ASN 11881) - To unsubscribe to usr-tc, send an email to "majordomo@xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.