(RADIATOR) Rewrite VSA?
Hugh Irvine
hugh at open.com.au
Fri Apr 23 19:15:33 CDT 2004
Hello Jerry -
Cisco IOS actually supports many of the Ascend attributes, so you
should try using them as they are first.
Otherwise you will probably need to use a "cisco-avpair" (check the
Cisco web site for details).
regards
Hugh
On 24 Apr 2004, at 02:28, Jerry Bonner wrote:
> I have my dictionary setup for vendor specific for Ascend-Data-Filter
> because our TNT's are setup for vendor specific.
>
> VENDORATTR 529 Ascend-Data-Filter 242 abinary
>
> Right now I have a hook setup that deletes those attributes for Cisco
> type
> nas's, :
>
> sub
> {
> my $p = ${$_[0]};
> my $rp = ${$_[1]};
> my $result = ${$_[2]};
>
> my $nasType;
>
> if (($result == $main::ACCEPT) &&
> ($nasType = $p->{Client}->{NasType}))
> {
> if ($nasType eq 'Cisco')
> {
> &main::log($main::LOG_DEBUG, "NasType is $nasType,
> stripping
> Ascend-Data-Filter attributes");
> $rp->delete_attr('Ascend-Data-Filter');
> }
> }
> return;
> }
>
> But I want to have my cisco nas's support the ascend-data-filters, is
> it
> possible to rewrite that attribute in a non-vsa form that cisco can
> handle?
>
> Thanks for your time,
>
> ~jerry
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>
NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list