(RADIATOR) Ascend filter problem
Hugh Irvine
hugh at open.com.au
Wed Jan 9 18:40:18 CST 2002
Hello Doug -
>
> Hi Broadwing has started requiring the following info passwd back to
> them.
>
> > Ascend-Data-Filter = "ip in forward tcp est",
> > Ascend-Data-Filter = "ip in forward dstip 192.48.96.0/24",
> > Ascend-Data-Filter = "ip in drop tcp dstport = 25",
> > Ascend-Data-Filter = "ip in forward"
>
> I made sure the "ATTRIBUTE Ascend-Data-Filter
> 242 abinary" is in our dictionary file.
>
> and and have the following added to my config file:
>
> AddToReply Ascend-Data-Filter = "ip in forward tcp est", \
> Ascend-Data-Filter = "ip in forward dstip 65.89.54.0/24", \
> Ascend-Data-Filter = "ip in drop tcp dst = 25", \
> Ascend-Data-Filter = "ip in forward"
>
You have copied the third line incorrectly, it should be:
Ascend-Data-Filter = "ip in drop tcp dstport = 25",
>
> Also have this entry this one has always been in my config.
>
>
> AddToReplyIfNotExist Service-Type = Framed-User, Framed-Protocol =
> PPP, \
> Framed-IP-Address = 255.255.255.254, \
> Framed-IP-Netmask = 255.255.255.255, \
> Framed-MTU =1500, \
> Framed-Compression = Van-Jacobson-TCP-IP, \
> Idle-Timeout = 1200, \
> Session-Timeout = 14400
>
> 1st Am I allowd to have both addtoreply and addtoreplyifnotexist in
> the realm.
>
Yes you can have both.
> 2nd I am getting the following error on my trace 4
>
> WARNING: Could not parse Ascend-Data-Filter: ip in drop tcp dst = 25
>
See above.
regards
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list