(RADIATOR) ascend-data-filters

[Hugh Irvine]

Hello Troy -

What exactly is the question?

regards

Hugh


On 2 Sep 2004, at 09:14, troy chaney wrote:

> We have a pass thru radius customer who is using radiator. When 
> receive their access-accept packets they are coming in this format.
>
> rad_recv: Access-Accept packet from host 66.210.32.142:1812, id=201, 
> length=216
>
>         Service-Type = Framed-User
>
>         Framed-Protocol = PPP
>
>         Framed-IP-Address = 255.255.255.254
>
>         Framed-IP-Netmask = 255.255.255.255
>
>         Session-Timeout = 14400
>
>         Idle-Timeout = 900
>
>         Ascend-Data-Filter = "ip input forward tcp est"
>
>         Ascend-Data-Filter = "ip input forward 0 dstip 
> 66.210.32.128/27"
>
>         Ascend-Data-Filter = "ip input forward 0 dstip 207.27.152.9/24"
>
>         Ascend-Data-Filter = "ip input drop tcp dstport = 25"
>
>         Ascend-Data-Filter = "ip input forward 0"
>
>  
>
> The ascend data filters are hosed up. Debugging is removing the entire 
> set of ascend-data-filters do to the way we are receiving them from 
> the customer. The customer has manually inserted the filters in his 
> radius.cfg file with the realm handler information. They are not using 
> a realms.cfg file. The customer also references the dictionary. Their 
> configuration is a lot different then ours and I am a bit stumped as 
> to how to help them.
>
>  
>
> Troy
>
>  
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.