[rbak-nsp] clips "clear subscriber" and nak

[Frans Legdeur]

Hi Marcin,

As you know, the DHCP protocol needs to take action with a renew request of
the lease from the client before it can answer the NAK.

Since this is half way the lease time, you can also play with the fact that
the lease time for subscribers that are part of the unauthorized pool should
be set as small as possible.
With Redback that comes down to 5 minutes if I'm correct.

Using an external DHCP server, this can be set even smaller, so that your
client will react each 30 seconds (or less) to see if the lease is still
valid. This is only interesting for subscribers that need to get away from
this area, due to authentication reasons.

As far as I know, this is how I would try to solve the puzzle.

Kind regards,


Frans.


> From: Marcin Kuczera <marcin at leon.pl>
> Date: Fri, 27 Mar 2009 15:20:01 +0100
> To: <redback-nsp at puck.nether.net>
> Subject: [rbak-nsp] clips "clear subscriber" and nak
> 
> hello,
> 
> is it possible so that SE will send NAK to host, once clear subscriber
> for clips is executed ?
> 
> In our case, we have unauthorized subscribers in a different pool
> (private addresses) and once we provide authorization in radius, we
> would like to force remote computer to /release /renew...
> 
> Regards,
> Marcin
> _______________________________________________
> redback-nsp mailing list
> redback-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/redback-nsp