[EXTERNAL] Re: Internet Access By Nat

[Winfield, Alister]

I think the right answer as it normally is ... read the documentation that comes with your NAT solution. RADIUS doesn't know how your NAS works it just provides the tools to implement what you need. I suspect Alan's right in this case.. I doubt that RADIUS is involved (except perhaps in getting accounting information about the resulting mappings).

Alister.

On 04/01/2019, 21:13, "Freeradius-Users on behalf of Alan DeKok" <freeradius-users-bounces+alister.winfield=sky.uk at lists.freeradius.org on behalf of aland at deployingradius.com> wrote:

    On Jan 4, 2019, at 4:07 PM, Ali Arslan via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
    >
    > An ISP need to use NAT to let its subscribers access internet because of limited number of available public IP addresses.
    >
    > The requirements are as follows:
    >
    > 1- In order to reduce the amount of NAT IPDR (Internet Protocol Detail Record) data that will be sent to Telecommunications Communication Presidency, each user in NAT applications should be assigned a certain range of ports. For example, assuming a range of 200 ports is defined by the operator for each user, when a subscriber with a private IP address of 10.0.0.1 wants to make a connection over the actual IP, a port range of 10000: 10200 for that actual IP address is allocated to that user.
    >
    > 2- A port or port range assigned to a user; after being wasted for at least one hour, it is appropriate to allocate it to a different user Is there way to configure this in freeradius or is it purely a nas procedure?

      NAT / port assignment is 100% up to the NAS.  RADIUS is not involved at all.

      Alan DeKok.


    -
    List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
    --------------------------------------------------------------------
    This email is from an external source. Please do not open attachments or click links from an unknown or suspicious origin. Phishing attempts can be reported by sending them to phishing at sky.uk as attachments. Thank you
    --------------------------------------------------------------------



Information in this email including any attachments may be privileged, confidential and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you have received it in error, please notify the sender by return e-mail and delete it from your system. You should not reproduce, distribute, store, retransmit, use or disclose its contents to anyone. Please note we reserve the right to monitor all e-mail communication through our internal and external networks. SKY and the SKY marks are trademarks of Sky Limited and Sky International AG and are used under licence.

Sky UK Limited (Registration No. 2906991), Sky-In-Home Service Limited (Registration No. 2067075), Sky Subscribers Services Limited (Registration No. 2340150) and Sky CP Limited (Registration No. 9513259) are direct or indirect subsidiaries of Sky Limited (Registration No. 2247735). All of the companies mentioned in this paragraph are incorporated in England and Wales and share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD