walled garden concept

[Siraj 'Sid' Rakhada]

Hello Wash,

On 17/02/06, Odhiambo Washington <wash at wananchi.com> wrote:

> Does anyone know of any tutorials for setting up a "walled garden"?
> I work for an ISP and we'd like to allow a specific dialup account
> Free Access via our RADIUS, but we want to limit this user to access
> just three or so urls: Our customer {registration|renewal|webselfcare}
> interfaces only.
>
> I am looking for ideas on how this is done. I suppose it's done on the
> NAS, yes?

What equipment do you use for the dial-up end? I'm not sure how to do
this on FreeBSD per se, but you can do this kind of solution on Cisco
+ RADIUS by sending an av-pair which says to the Cisco 'apply this
access-list' to the virtual interface when the user logs on.

Does this sound like the kind of solution you want?

It's been a long long time since I last configured this kind of thing though!

Regards,

Sid