dukka

Thanks SYNACK for the reply. I will try to be a little clearer. When using the first 10.x net the users can only connect to the portal (Juniper ERX). So they create the account and logon. They recive the 172. But what I was meaning is that even though all "portal active" users can connect to the 94.x network. It should only be those that has a valid account on the Game portal, that will be a Apache,Mysql based BSD box. Like stated I could solve this with the ACL if it was mear the network part. But here comes the tricky also validitaing acces againts a mysql db, and when that turns out ok i will let them trough. My though was that perpahs implement a radius solution agains the mysqldb and move the game servers to another /27 net. And yes it's a large extreme networks/Juniper network with 10Gbit in whole backbone Ideas? BR Goran

Hi. We are in the state of implementing some sort of gaming area in a MAN. I will try to explain to the best I can and the see if someone could give me a hinter where to go from here. Today we have a large Metro Area Network. We have around 16000 ports connected. The users can plug into the network jack and get by default a 10.x.x.x/8 adress. With this adress they are able to connect to the city portal. Once there they will be able to create a account. When they login with the newly created account they will recive release the 10 adress and get a new 172.16.x.x/16 adress. Now from that portal they get som new policys, some policys says they get a route to access some City information and some other town related subjects. From here they can also choose from around 10 different ISP to get internet/ip tele and such things from. In the "default" policy they will be routed to outer DC with a default VLAN 3211 and the network 94.x.x.x/27 where our game servers and our "own game portal" resides. Question. We are trying to figure out a way to only let authentificated users get access to the game servers. Like, the users signs up in our "town community game center". When they are validated they will have access to connect to the game servers. Non vailidated user should be able so connect to our game portal, but not be able to connect to the game servers. But since the net is default routed to our network they could just do a our.network:27015 and connect to the servers, the servers don´t have any means of authentificate the users. Any ide on aproach here? Any hints, thoughts or whacky ideas is most appriciated. BR Goran