Router feature question

[Amaru]

I'm looking for a router that has significant controls on connected users. I want to limit how much a user can download in a day, for example.

 

[JackMDS]

Originally posted by: AmaruI want to limit how much a user can download in a day, for example.

Entry Level Routers cannot do it.

You need a professional Managed Router (I.e. be prepare to spend ~ $500 - $1000).

:sun:

 

[Amaru]

thow me some model numbers or other ways to do this

 

[spidey07]

best bet would be some kind of proxy server that authenticates people.

one would assume microsoft ISA or squid could do this.

 

[Cloud Strife]

I think the Linksys WRT54G with 3rd party firmware can do this.

 

[JackMDS]

Originally posted by: Cloud Strife
I think the Linksys WRT54G with 3rd party firmware can do this.

3rd party firmware can limit the available bandwidth but not the amount of daily downloads.

Originally posted by: spidey07
best bet would be some kind of proxy server that authenticates people.

one would assume microsoft ISA or squid could do this.

Windows 2003 with ISA would.

:sun:

 

[spidey07]

makes sense...that's what a proxy does.

Routers/firewalls rarely get involved with tracking users and their usage. Notice I said user, not IP address. If they do they normally use a protocol to offload this tracking to a server. Same as you offload virus scrubbing of internet traffic.

But the approach of a authenticated proxy is the best option IMHO. You limit usage by account/username so no matter what computer they're using they're tracked.

 

[Cloud Strife]

Originally posted by: spidey07
makes sense...that's what a proxy does.

Routers/firewalls rarely get involved with tracking users and their usage. Notice I said user, not IP address. If they do they normally use a protocol to offload this tracking to a server. Same as you offload virus scrubbing of internet traffic.

But the approach of a authenticated proxy is the best option IMHO. You limit usage by account/username so no matter what computer they're using they're tracked.

That means he'll have to set up an Active Directory if he's going with the Windows route.

What's the Linux version name of Active Directory?

 

[futuristicmonkey]

Originally posted by: Cloud Strife

Originally posted by: spidey07
makes sense...that's what a proxy does.

Routers/firewalls rarely get involved with tracking users and their usage. Notice I said user, not IP address. If they do they normally use a protocol to offload this tracking to a server. Same as you offload virus scrubbing of internet traffic.

But the approach of a authenticated proxy is the best option IMHO. You limit usage by account/username so no matter what computer they're using they're tracked.

That means he'll have to set up an Active Directory if he's going with the Windows route.

What's the Linux version name of Active Directory?

Probably a mix of OpenLDAP and Samba set up as a pdc ?

 

[spidey07]

heck, you could just use any free radius server for authentication. It just depends on how you want to do/scale the security/user database aspect of it.

for small stuff - radius. for scalable stuff - LDAP or AD.