Re: Re :checking authorization in the duration of connection
How about vpn windows as NAS? 802.1x coding is not going to be of much use for adsl. What NAS are you using? Does it support gigawords in accounting and does it have traffic limiting VSAs? Best thing to do is to create a traffic sqlcounter that will set the session limit at the start of the session (at authentication) and use methods explained in netexpertise article to keep collected traffic information more realistic (in that scenario loosing even one stop packet for a session that lasted days would be quite bad). Ivan Kalik Kalik Informatika ISP
How about vpn windows as NAS?
Is that a joke? Windows server would be useless. It can't terminate adsl, at least not much more than one line. So, someone else is going to terminate adsl and send you what via VPN? Accounting? You don't need Windows at all then - just a freeradius server. Or traffic via L2TP tunnels? Your Windows server is going to die with any significant ammount of traffic. Using Windows server as a router is insane. It can work like that - but very, very badly. Even a cheap dumb $50-$100 router like Mikrotik will outperform it by miles. Ivan Kalik Kalik Informatika ISP
Hi, Sorry for barging into the thread, but something just caught my attention. We use Mikrotik throughout our network, and have found them quite useful and with the right hardware, it performs pretty well in our setup. But, there are guys in this forum who are quite frankly, way ahead than myself in terms of both knowledge and experience. So, could you please elaborate why you rate Mikrotik as dumb? Perhaps I am already in trouble! Regards, HASSAN On 5/6/09, Ivan Kalik <tnt@kalik.net> wrote:
How about vpn windows as NAS?
Is that a joke? Windows server would be useless. It can't terminate adsl, at least not much more than one line. So, someone else is going to terminate adsl and send you what via VPN? Accounting? You don't need Windows at all then - just a freeradius server. Or traffic via L2TP tunnels? Your Windows server is going to die with any significant ammount of traffic. Using Windows server as a router is insane. It can work like that - but very, very badly. Even a cheap dumb $50-$100 router like Mikrotik will outperform it by miles.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Sent from my mobile device
Sorry for barging into the thread, but something just caught my attention. We use Mikrotik throughout our network, and have found them quite useful and with the right hardware, it performs pretty well in our setup.
But, there are guys in this forum who are quite frankly, way ahead than myself in terms of both knowledge and experience. So, could you please elaborate why you rate Mikrotik as dumb? Perhaps I am already in trouble!
And plenty other people find it buggy and quirky. It has claims to support many things which then turns out to be half-baked. But with realistic demands - it's great value for money. Ivan Kalik Kalik Informatika ISP
Phew... thanks for relieving me. Mikrotik does have their problems, indeed. With each new update, sometimes new bugs are added. But, having used it for some time now, and extensively, we've had to learn how to adapt our requirements to Mikrotik's abilities. The biggest benefit that we find is, it uses Linux's powerful iptables and related TCP / IP software, and provides a very nice GUI, which is easy to teach to my techies for monitoring / basic config. Regards HASSAN ----- Original Message ----- From: "Ivan Kalik" <tnt@kalik.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Saturday, May 09, 2009 20:58 Subject: Re: checking authorization in the duration of connection
Sorry for barging into the thread, but something just caught my attention. We use Mikrotik throughout our network, and have found them quite useful and with the right hardware, it performs pretty well in our setup.
But, there are guys in this forum who are quite frankly, way ahead than myself in terms of both knowledge and experience. So, could you please elaborate why you rate Mikrotik as dumb? Perhaps I am already in trouble!
And plenty other people find it buggy and quirky. It has claims to support many things which then turns out to be half-baked. But with realistic demands - it's great value for money.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Eric -
Ivan Kalik -
Nyamul Hassan