[rbak-nsp] CLIPS and DHCP

[Arjan Van Der Oest]

On 12 okt. 2011, at 11:42, Alexandre Chapellon wrote:

> Wich leads me to the conclusion the subscriber should not access the 
> network anymore. Unfortuantely, on the CPE side, I can still ping 
> internet adresses and browse the web.
> How comes? Is it because of CLIPS itself being connection-less? Is there 
> something special to send in the CoA request? Is there any alternative 
> to shut network access for a specific subscriber using CLIPS?

Maybe a silly question, but did you prevent that subscriber from re-entering the network before CoA'ing him/her? When you send the CoA disconnect and have a ping running, do you see an interrupt in the replies?

-- 
Met vriendelijke groet,

Arjan van der Oest
Senior Network Engineer / Security Officer

Voiceworks BV - Editiestraat 29 - 1321 NG Almere



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/redback-nsp/attachments/20111012/aa4728d9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4804 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/redback-nsp/attachments/20111012/aa4728d9/attachment.bin>