12 Feb
2016
12 Feb
'16
5:34 p.m.
On 2/12/16 2:12 PM, Matthew Newton wrote:
Auth-Type is an internal attribute. It's not sent back to the NAS. It should be 'Accept'.
You need to send something else to your NAS to tell it to quarantine the user. For example it if is a switch you might set a different VLAN by sending back a different Tunnel-Private-Group-Id.
That's what specifying a different ip pool does - it then gives the user a non-routable ip address (e.g. 10.99.x.x). At the moment, the main goal is keeping some misconfigured/suspended modems from spamming the logfile (they retry at relatively high rates on rejection), but eventually we'll use the mechanism to redirect users to a web site like most wireless hotspots do.