(RADIATOR) Rewrite VSA?

Hugh Irvine hugh at open.com.au
Fri Apr 23 19:15:33 CDT 2004


Hello Jerry -

Cisco IOS actually supports many of the Ascend attributes, so you 
should try using them as they are first.

Otherwise you will probably need to use a "cisco-avpair" (check the 
Cisco web site for details).

regards

Hugh


On 24 Apr 2004, at 02:28, Jerry Bonner wrote:

> I have my dictionary setup for vendor specific for Ascend-Data-Filter
> because our TNT's are setup for vendor specific.
>
> VENDORATTR      529     Ascend-Data-Filter              242     abinary
>
> Right now I have a hook setup that deletes those attributes for Cisco 
> type
> nas's, :
>
> sub
> {
>     my $p = ${$_[0]};
>     my $rp = ${$_[1]};
>     my $result = ${$_[2]};
>
>     my $nasType;
>
>     if (($result == $main::ACCEPT) &&
>         ($nasType = $p->{Client}->{NasType}))
>     {
>         if ($nasType eq 'Cisco')
>         {
>             &main::log($main::LOG_DEBUG, "NasType is $nasType, 
> stripping
> Ascend-Data-Filter attributes");
>             $rp->delete_attr('Ascend-Data-Filter');
>         }
>     }
>     return;
> }
>
> But I want to have my cisco nas's support the ascend-data-filters, is 
> it
> possible to rewrite that attribute in a non-vsa form that cisco can
> handle?
>
> Thanks for your time,
>
> ~jerry
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list