attached to the profile. The client should test for this returned
value, to prevent normal dial-in users from gaining access via this
profile.
6. Resource Management
Authorized sessions may need to be allocated additional dynamic
resources in order to perform their services. The most typical is IP
addresses. The allocation may want to be delayed until needed or
coordinated on a scale independent of the RADIUS server. Additional
messages may be used to allocate and free these resources. The
RADIUS server may proxy these requests to another server.
Examples: Certain servers can allocate addresses local to the NAS or
use an outboard address server. Other servers have an internal
address pool capability, which will fill in the Framed-IP-Address
attribute with an assigned value based on pool selected.
6.1. Managed Resources:
Resources managed include: IP Addresses, Concurrent Logins, Dial-in
Port allocation policies, Tunnel limits and load distribution.
Mitton Informational [Page 9]
RFC 2882 Extended RADIUS Practices July 2000
There are several different types of implementation techniques:
- Explicit request/free resource requests
- Monitor usage with deamons watching the state
- Explicit messages to a state deamon
- Monitor Accounting messages for state changes
6.2. Resource Management Messages
Messages used for resource management
- IP Address Allocate
- IP Address Release
- Resource Request
- Resource Response
- Resource Free Request
- Resource Free Response
- Resource Reclaim Request
- NAS Reboot Request/Response
These messages are used to allocate and free resources for a NAS from
a centralized server. These mechanisms allows the service provider
better administrative control than some automated LAN services, which
don't have policy inputs or controls.
6.3. Concurrent Logins
The RADIUS protocol was designed to allow stateless servers. That
is, servers that don't know the status of the active sessions.
However, it is very important for many service providers to keep
track of how many sessions a given user may have open, and
accordingly disallow access.
There are several different techniques used to implement login limits
(74 paginas)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales