<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
Le 13/10/2011 01:02, Christopher O'Shea a écrit :
<blockquote
cite="mid:CAOGrpby27ROAQK9WkP+03XRBWi8i36G50G9e+pxjp3bkmpuLTQ@mail.gmail.com"
type="cite">Hi Alex,<br>
<br>
I seen this happen when you have manually bound the mulitbind
interface to a port. As i think its related to how the multibind
will only reply to ARP's (of the default gateway address) when
bound to a circuit. <br>
<br>
Can you post the config. <br>
<br>
</blockquote>
Unfortunately not, as I told I do not adminiter the redback
devices... I am just looking for some experiences like yours.<br>
I will forward your remarqs to the personns involved (which are not
used ti use mailing lists I guess).<br>
<br>
Any idea concerning point 2?<br>
<br>
Bests regards<br>
<blockquote
cite="mid:CAOGrpby27ROAQK9WkP+03XRBWi8i36G50G9e+pxjp3bkmpuLTQ@mail.gmail.com"
type="cite"><br clear="all">
Chris O'Shea<br>
<br>
<br>
<br>
<div class="gmail_quote">On Wed, Oct 12, 2011 at 10:33 PM,
Alexandre Chapellon <span dir="ltr"><<a
moz-do-not-send="true" href="mailto:a.chapellon@horoa.net">a.chapellon@horoa.net</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex;">
<br>
<br>
Le 12/10/2011 13:03, Arjan Van Der Oest a écrit :
<div class="im"><br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
On 12 okt. 2011, at 11:42, Alexandre Chapellon wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
Wich leads me to the conclusion the subscriber should
not access the<br>
network anymore. Unfortuantely, on the CPE side, I can
still ping<br>
internet adresses and browse the web.<br>
How comes? Is it because of CLIPS itself being
connection-less? Is there<br>
something special to send in the CoA request? Is there
any alternative<br>
to shut network access for a specific subscriber using
CLIPS?<br>
</blockquote>
<br>
Maybe a silly question, but did you prevent that
subscriber from re-entering the network before CoA'ing
him/her? When you send the CoA disconnect and have a ping
running, do you see an interrupt in the replies?<br>
<br>
</blockquote>
</div>
Not that silly :)!<br>
In fact no I didn't prevent the user from re-entering the
network. But I also didn't see any new authentication request
following the CoA. The next authentication happens when DHCP
release expires (one hour for my tests).
<div class="im">
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
-- <br>
Met vriendelijke groet,<br>
<br>
Arjan van der Oest<br>
Senior Network Engineer / Security Officer<br>
<br>
Voiceworks BV - Editiestraat 29 - 1321 NG Almere<br>
<br>
<br>
<br>
</blockquote>
<br>
</div>
<div>
<div class="h5">
-- <br>
<<a moz-do-not-send="true" href="http://www.horoa.net"
target="_blank">http://www.horoa.net</a>><br>
<br>
Alexandre Chapellon<br>
<br>
Ingénierie des systèmes open sources et réseaux.<br>
Follow me on twitter: @alxgomz <<a
moz-do-not-send="true"
href="http://www.twitter.com/alxgomz" target="_blank">http://www.twitter.com/alxgomz</a>><br>
<br>
_______________________________________________<br>
redback-nsp mailing list<br>
<a moz-do-not-send="true"
href="mailto:redback-nsp@puck.nether.net"
target="_blank">redback-nsp@puck.nether.net</a><br>
<a moz-do-not-send="true"
href="https://puck.nether.net/mailman/listinfo/redback-nsp"
target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<!--
horoa.html
Copyright 2011 Alexandre Chapellon <alxgomz@elronde>
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
MA 02110-1301, USA.
-->
<div style="height: 77px; width: 470px; background-color: #707070"><a
href="http://www.horoa.net"><img style="border: none; float:
left; margin-right:10px"
src="cid:part1.03050603.07040300@horoa.net"></a>
<p style="font-family: miso; font-size: 18px; padding-top: 8px;
color: white">Alexandre Chapellon</p>
<p style="font-family: miso; font-size: 18px; padding-top: 0px;
color: orange">Ingénierie des systèmes open sources et
réseaux.<br>
Follow me on twitter: <a
href="http://www.twitter.com/alxgomz">@alxgomz</a></p>
</div>
</div>
</body>
</html>