(RADIATOR) Ascend filter problem

Hugh Irvine hugh at open.com.au
Wed Jan 9 18:40:18 CST 2002


Hello Doug -

>
> Hi Broadwing has started requiring the following info passwd back to
> them.
>
> > Ascend-Data-Filter = "ip in forward tcp est",
> > Ascend-Data-Filter = "ip in forward dstip 192.48.96.0/24",
> > Ascend-Data-Filter = "ip in drop tcp dstport = 25",
> > Ascend-Data-Filter = "ip in forward"
>
> I made sure the "ATTRIBUTE       Ascend-Data-Filter
> 242     abinary"  is in our dictionary file.
>
> and and have the following added to my config file:
>
> AddToReply Ascend-Data-Filter = "ip in forward tcp est", \
>            Ascend-Data-Filter = "ip in forward dstip 65.89.54.0/24", \
>            Ascend-Data-Filter = "ip in drop tcp dst = 25", \
>            Ascend-Data-Filter = "ip in forward"
>

You have copied the third line incorrectly, it should be:

	Ascend-Data-Filter = "ip in drop tcp dstport = 25",

>
> Also have this entry this one has always been in my config.
>
>
> AddToReplyIfNotExist Service-Type = Framed-User, Framed-Protocol =
> PPP,  \
>          Framed-IP-Address = 255.255.255.254, \
>          Framed-IP-Netmask = 255.255.255.255, \
>          Framed-MTU =1500, \
>          Framed-Compression = Van-Jacobson-TCP-IP, \
>          Idle-Timeout = 1200, \
>          Session-Timeout = 14400
>
> 1st Am I allowd to have both addtoreply and addtoreplyifnotexist in
> the realm.
>

Yes you can have both.

> 2nd I am getting the following error on my trace 4
>
> WARNING: Could not parse Ascend-Data-Filter: ip in drop tcp dst = 25
>

See above.

regards

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list