Blame Manuals/HowTos/Dialup/Server/Usage/connections.docbook

6d6cf1
<sect1 id="server-usage-connections">
6d6cf1
6d6cf1
    <title>Administering Dial-Up Connections</title>
6d6cf1
6d6cf1
    <para>
6d6cf1
        The lifetime of dial-up connections must be limitted based on
6d6cf1
        the number of users you expect to establish connection and the
6d6cf1
        kind of services you plan to provide. The mail service
6d6cf1
        provided by the server computer is conceived as a public
6d6cf1
        service so anyone with a modem attached to a computer would be
6d6cf1
        able to have access to it.  However, due to hardware
6d6cf1
        limitations, only 100 users will be allowed to be registered
6d6cf1
        in the public mail service. Based on this information, the
6d6cf1
        lifetime of established connections will be of 15 minutes from
6d6cf1
        the established moment on. Once the connection has been
6d6cf1
        established, if the link is idle for 1 minute, the server
6d6cf1
        computer will close the established connection to free the
6d6cf1
        telephone line.  This control can be implemented through the
6d6cf1
        <option>maxconnect</option> and <option>idle</option> options
6d6cf1
        inside the <application>pppd</application>'s configuration
6d6cf1
        file.
6d6cf1
    </para>
6d6cf1
6d6cf1
    <para>
6d6cf1
        Only registered user profiles will be able to establish connections
6d6cf1
        to the server computer.  This control can be implemented using
6d6cf1
        the <option>allow-number</option> option in the
6d6cf1
        <application>pppd</application>'s configuration file to define a
6d6cf1
        list of all telephone numbers that are allowed to establish
6d6cf1
        connection with the server computer, based on the list of
6d6cf1
        registered user profiles.  By default, all telephone numbers
6d6cf1
        are denied from establishing access with the server computer,
6d6cf1
        except those ones explicitly set by
6d6cf1
        <option>allow-number</option> option.  If the
6d6cf1
        <option>allow-number</option> option is not present in
6d6cf1
        <application>pppd</application>'s configuration file, all
6d6cf1
        telephone numbers are allowed to establish connection with the
6d6cf1
        server computer, so be sure to include the
6d6cf1
        <option>allow-number</option> option in
6d6cf1
        <application>pppd</application>'s configuration file if you
6d6cf1
        want to control who can/cannot establish connection with the
6d6cf1
        server computer.
6d6cf1
    </para>
6d6cf1
6d6cf1
<screen>
6d6cf1
##### centos-pppd-config will overwrite this part!!! (begin) #####
6d6cf1
allow-number 12345
6d6cf1
allow-number 21345
6d6cf1
allow-number 34567
6d6cf1
##### centos-pppd-config will overwrite this part!!! (end) #####
6d6cf1
</screen>
6d6cf1
6d6cf1
    <para>
6d6cf1
        The <application>centos-pppd-admin</application> application
6d6cf1
        must be considered part of user profile registration process
6d6cf1
        inside the server computer. The
6d6cf1
        <application>centos-pppd-admin</application> application would
6d6cf1
        be used to control the list of allowed telephone numbers
6d6cf1
        inside the <application>pppd</application>'s configuration
6d6cf1
        file, based on the list of user profiles. The
6d6cf1
        <application>centos-pppd-admin</application> application
6d6cf1
        should be executed after any registration/deletion action
6d6cf1
        against the list of user profiles with 
6d6cf1
        class="username">root</systemitem> privilages in order to be
6d6cf1
        able of writing the settings on
6d6cf1
        <application>pppd</application>'s configuration file.
6d6cf1
    </para>
6d6cf1
6d6cf1
    <para>
6d6cf1
        Redialing consecutive connections from the same telephone
6d6cf1
        number without any dealy between call retries must be avoided
6d6cf1
        from client computers. This would reduce the possibilities for
6d6cf1
        other client computers to establish connection with the server
6d6cf1
        computer. To prevent this issue from happening, it would be
6d6cf1
        necessary to provide more telephone lines than users
6d6cf1
        authorized to establish connection with the server computer.
6d6cf1
        Nevertheless, there is only one telephone line available for
6d6cf1
        the server computer to use.
6d6cf1
    </para>
6d6cf1
    
6d6cf1
</sect1>