user access rights

access group identifier; data in regular expression form about: permitted phones, network devices ip, network devices ports; time brackets

can be multiply entries in one group

- time brackets format if time not set - it means any time time format:

* * * * *

^ ^ ^ ^ ^

| | | | +- day of week (0 - 6)

| | | +-- month of year (1 - 12)

| | +--- day of month (1 - 31)

| +---- hour of day (0 - 24)

+----- minute of hour (0 - 60) 

examples:

* * * * 0,6 - access only on Sat and Sun

* 20-8 * * 0,6 - access only on Sat and Sun from 20 to 8

10-20,40-50 * * * 1-3,0,6 - more complex example.

Access from phone 322322 from any nas and any port

phone

nas

port

time d+322322\/d+

Access from any phone from nas 192.168.1.5 to any port

phone

nas

port

time .*

Access from any phone, any nas and from Asy1

phone | nas |   port   | time ---+---+-----+-----

  .*  |  .* | ^Asy1$   |

----------------- 

Portnames: Asy1 - AsyX for async dial-up connection (not-ISDN) for ISDN portnames start with Se (Se0:10, ...) for example on my AS5300 i see (Asy1 - Asy240 and Se0:1-Se7:30,...)

Access from any phone from nas 192.168.2.10 from Async1 and from any nas from Async3

phone |        nas     |  port  | time ---+--------+----+-----

 .*   | ^192.168.2.10$ | ^Asy1$ |

 .*   |      .*        | ^Asy3$ | --------------------- 

P.S. you should remember, that ports for PPP access can be named as AsyX or as ttyX (if user use chap/pap, then AsyX, if it use access from terminal or manual mode - ttyX)

if you wish create several usernames for several destination phone numbers you can use target masks on phone. for example, i have two modem pools - one on phone 320101, other on 8200, and i use next masks: for 8-200: ^8d+\/421232\:d+ for 32-01-01: ^8d+\/4212320101$

you should know, that if you use analog access server like cisco 2511 or so on, then phone will be "async/"

also you should know the phone, which your NAS get from E1, you can see it on Cisco equipment with command: debug isdn q931 (if you have E1 connection to telephone switch)

access for voip users from voice gateway

phone |      nas   |      port      | time ---+------+--------+-----

  .*  | ^10.1.1.1$ | ^FXO.*|^ISDN.* | -----------------------