Is there a way to limit ppp secret login subnet (not ip)?
For example user ‘usr1’ can login only from 10.10.1.0/24 and ‘usr2’ only from 10.10.2.0/24
Yes, use Radius, and then look at the Calling-Station-Id attribute.
from mt manual:
Calling-Station-Id - PPPoE and HotSpot- client MAC address in capital letters; PPTP and L2TP - client public IP address; ISDN - client MSN
i need to limit by subnet not ip adress.
jurisv,
you do not login via PPP from some IP address (except for PPTP). Are you talking about PPTP or are you talking about PPPoE? For PPPoE your question does not make sense.
–Tom
I’m very aware of that yes… But surely, a IP address is either part of, or not part of a Subnet? If Calling-Station-Id = a.b.c.d, deny access. If Calling-Station-Id = x.x.x.x, allow access. It’s not really that hard is it?
Oh well…
i’m talking about pptp. limit by adress i alredy can without using radius…