Setting Up Remote Connection Restrictions

You can limit the number of connections that a remote user can have concurrently per network. You can restrict the number of concurrent dial-in connections for each User object, or you can set a default value for concurrent dial-in connections for each Dial Access System object.

This section contains the following tasks:

• Specifying Dial Access System Login Restrictions
• Specifying Per-User Login Restrictions

Specifying Dial Access System Login Restrictions

By default, the RADIUS server allows unlimited dial-in connections. You can also specify the number of concurrent dial-in connections that the RADIUS server will allow for each User object that authenticates through a given Dial Access System object.

For a given Dial Access System object, you can specify the following types of information tracked for each dial-in user:

• Timeout interval for an interim accounting packet (determines if a dial-in connection is active)
• Time interval (in days) before an entry in a user's current login connection is removed
• Maximum number of records kept in a user's login connection history

This section contains the following tasks:

• Setting Dial Access System Remote Connection Restrictions
• Setting the Current Connection Interval
• Setting the Interim Accounting Timeout Interval
• Setting the Maximum Records in the Remote Connection History

Setting Dial Access System Remote Connection Restrictions

To perform this task, you must have RADIUS accounting activated.

To add remote connection restrictions, complete the following steps:

1. Start ConsoleOne.

2. Double-click a Dial Access System object.

3. Click the Remote Connection Restrictions tab and specify the number of concurrent dial-in restrictions.

Refer to the context-sensitive help for more information.

Setting the Current Connection Interval

To set the current connection interval, complete the following steps:

1. Start ConsoleOne.

2. Double-click the Dial Access System object.

3. Click the Remote Connection Restrictions tab and specify a value (in days) for the expiring period for removing current connection entry.

Refer to the context-sensitive help for more information.

Setting the Interim Accounting Timeout Interval

To set the interim accounting timeout interval, complete the following steps:

1. Start ConsoleOne.

2. Double-click the Dial Access System object.

3. Click the Remote Connection Restrictions tab and enter a value (in minutes) for the interim accounting timeout.

Refer to the context-sensitive help for more information.

Setting the Maximum Records in the Remote Connection History

To add concurrent login restrictions, complete the following steps:

1. Start ConsoleOne.

2. Double-click the Dial Access System object.

3. Click the Remote Connection Restrictions tab.

4. Enter a value for the maximum records.

Refer to the context-sensitive help for more information.

Specifying Per-User Login Restrictions

You can accept the default number of concurrent dial-in connections that the RADIUS server will allow for each User object (as specified for a given Dial Access System object), or you can override the default value for a given User object to either specify a different number of concurrent dial-in connections or allow unlimited dial-in connections.

For a given User object, the following types of information are tracked automatically:

• Active connections
• Login connection history

Setting User Remote Connections Restrictions

To add remote connections restrictions, complete the following steps:

1. Start ConsoleOne.

2. Double-click a User object.

3. Select Remote Connections and specify the login restrictions.

Refer to the context-sensitive help for more information.