[pptp-server] Managing multiple authentication domains

[Nate Carlson]

On Wed, 3 May 2000, Mike Ireton wrote:

> Howdy,
> 	So I would like to know how I would solve the following problem
> with poptop/pppd:
> 
> 	A router serves three different organizations - we'll call them
> companya, companyb, and companyc. These are all assigned IP addresses such
> as 10.1.1/24, 10.1.2/24 and 10.1.3/24. 
> 
> 	An employee of companya vpn's in. I want her to be assigned an ip
> address within companya's address range (10.1.1/24). Then employee's of
> companyb and companyc vpn in as well, and I want them to be assigned
> addresses within their respective ranges as well.
> 
> 	It appears to me that I cannot do this. Instead, I need to choose
> a range of IP addresses ahead of time and cannot base the number chosen
> upon the chap credentials used to authenticate with.
> 
> 	Any ideas?

I haven't personally tried this, but could you specify all the ranges in
pptpd.conf and then assign the ip using the fourth field of the
chap-secrets file? I know you can specify static ip's within the one range
you have using that field.. I've just never tried multiple ranges.

-- 
Nate Carlson <natecars at real-time.com>   | Phone : (952)943-8700
http://www.real-time.com                | Fax   : (952)943-8500