[rbak-nsp] CLIPS and DHCP
Alexandre Chapellon
a.chapellon at horoa.net
Wed Oct 12 19:05:06 EDT 2011
Le 13/10/2011 01:02, Christopher O'Shea a écrit :
> Hi Alex,
>
> I seen this happen when you have manually bound the mulitbind
> interface to a port. As i think its related to how the multibind will
> only reply to ARP's (of the default gateway address) when bound to a
> circuit.
>
> Can you post the config.
>
Unfortunately not, as I told I do not adminiter the redback devices... I
am just looking for some experiences like yours.
I will forward your remarqs to the personns involved (which are not used
ti use mailing lists I guess).
Any idea concerning point 2?
Bests regards
>
> Chris O'Shea
>
>
>
> On Wed, Oct 12, 2011 at 10:33 PM, Alexandre Chapellon
> <a.chapellon at horoa.net <mailto:a.chapellon at horoa.net>> wrote:
>
>
>
> Le 12/10/2011 13:03, Arjan Van Der Oest a écrit :
>
> On 12 okt. 2011, at 11:42, Alexandre Chapellon wrote:
>
> Wich leads me to the conclusion the subscriber should not
> access the
> network anymore. Unfortuantely, on the CPE side, I can
> still ping
> internet adresses and browse the web.
> How comes? Is it because of CLIPS itself being
> connection-less? Is there
> something special to send in the CoA request? Is there any
> alternative
> to shut network access for a specific subscriber using CLIPS?
>
>
> Maybe a silly question, but did you prevent that subscriber
> from re-entering the network before CoA'ing him/her? When you
> send the CoA disconnect and have a ping running, do you see an
> interrupt in the replies?
>
> Not that silly :)!
> In fact no I didn't prevent the user from re-entering the network.
> But I also didn't see any new authentication request following the
> CoA. The next authentication happens when DHCP release expires
> (one hour for my tests).
>
>
> --
> Met vriendelijke groet,
>
> Arjan van der Oest
> Senior Network Engineer / Security Officer
>
> Voiceworks BV - Editiestraat 29 - 1321 NG Almere
>
>
>
>
> --
> <http://www.horoa.net>
>
> Alexandre Chapellon
>
> Ingénierie des systèmes open sources et réseaux.
> Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
>
> _______________________________________________
> redback-nsp mailing list
> redback-nsp at puck.nether.net <mailto:redback-nsp at puck.nether.net>
> https://puck.nether.net/mailman/listinfo/redback-nsp
>
>
--
<http://www.horoa.net>
Alexandre Chapellon
Ingénierie des systèmes open sources et réseaux.
Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/redback-nsp/attachments/20111013/8996e8bb/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: horoa_sig.png
Type: image/png
Size: 6693 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/redback-nsp/attachments/20111013/8996e8bb/attachment-0001.png>
More information about the redback-nsp
mailing list