[cisco-nas] multilink per-user

[Oliver Boehmer (oboehmer)]

Tassos,

> I want to prevent particular users from negotiating multilink.
> I'm already doing the latter (prevent particular users from
> using more than one link) with the multilink max-links attribute.

As the multilink negotation occurs before PPP enters the authentication
phase, there is no way to disable this on a per-user basis. The only
option is to use RPM (local or remote) and to define a dnis-based
template which doesn't include multilink (I think this works, never
tried it).

May I ask why you want to do this if you can restrict the # of bundle
members on a per-user basis.

	oli

> 
> Aaron Leonard wrote:
> 
>> Tassos,
>> 
>> Is your goal to prevent particular users from negotiating multilink
>> per se, or is it only to prevent particular users from using more
>> than one link?  This latter goal can be accomplished.
>> 
>> Regards,
>> 
>> Aaron
>> 
>> ---
>> 
>> 
>>> I'm trying to enable/disable "ppp multilink" per-user,
> which to be honest i don't believe
>>> it can be done since multilink gets negotiated during the first
>>> phase of lcp (before the actual authentication, so the per-user
>>> config is not known). 
>> 
>> 
>>> I have tried configuring "lcp:interface-config#1=no ppp
> multilink" in the user's radius
>>> profile and "ppp multilink" under dialer, or
> "lcp:interface-config#1=ppp multilink" in the
>>> user's radius profile and "no ppp multilink" under dialer, but none
>>> of them seem to be doing what i want, since multilink dialer config
>>> always overrides my per-user config. 
>> 
>> 
>>> In the first case if the customer comes with mlp enabled, he ends
>>> up with mlp enabled. In the second case if the customer comes with
>>> mlp enabled, he ends up with mlp disabled. 
>> 
>> 
>>> Preauthentication should work here, but i don't have any CLID/DNIS
>>> number available. Any other idea? Is there a way i can cause lcp
>>> renegotiation like in l2tp termination? 
>> 
>> 
>> 
>>> _______________________________________________
>>> cisco-nas mailing list
>>> cisco-nas at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-nas
>> 
>> 
> 
> _______________________________________________
> cisco-nas mailing list
> cisco-nas at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nas