[RADIATOR] Additional radius attributes for particular users on shared realm :: how to?!!

[Hugh Irvine]

Hello -

The answer to this depends on what else you are doing in your configuration file.

The simplest way to do it is with Handlers (not Realms) like this:


…….

<Handler User-Name = /^xyz/>
	<AuthBy ….>
		…..
		AddToReply cisco-avpair = ip:sub-qos-policy-in=ISP_1024_UpStream,
			cisco-avpair = ip:sub-qos-policy-out=ISP_1024_DownStream,
			cisco-avpair = "lcp:interface-config=description *******> XYZ <*******”,
			cisco-avpair = "lcp:interface-config=ip vrf forwarding xyz”,
			cisco-avpair = "lcp:interface-config=ip unnumbered loopback 99”,
			Framed-MTU = 1492,
			Framed-Protocol = PPP,
			Service-Type = Framed-User
	</AuthBy>
</Handler>

<Handler>
	<AuthBy ….>
		…..
	</AuthBy>
</Handler>

…..


There are many other possibilities depending on your exact requirements.

regards

Hugh

		
> On 29 Jan 2015, at 00:32, Mohammed Alhaj Ali <m.alhaj at itc.sa> wrote:
> 
> Hi,
> 
> I'd asking how to use AddToReply to add additional radius attributes for particular users on shared realm, for example if I've user name start with 'xyz' then reply with additional radius attribute to requested NAS,
> We already this configuration on Cisco AAA (car), and now we trying to migrate on radiator, below script were applied on CAR please let me know how to translate this to radiator configuration file.
> 
> 
> (tcl script)...
> if { [ string match "xyz*" $userName ] } {
>                     $response addProfile "PPPoEProfile-XYZ-$realm"
> 
> } else {
>                     $response addProfile "PPPoEProfile-$realm"
> 
> 
> Attribute profile for any user start with 'xyz'
> 
> --> ls
> 
> [ //localhost/Radius/Profiles/PPPoEProfile-XYZ-1024.example.com/Attributes ]
>    Cisco-AVPair = ip:sub-qos-policy-in=ISP_1024_UpStream
>    Cisco-AVPair = ip:sub-qos-policy-out=ISP_1024_DownStream
>    Cisco-AVPair = "lcp:interface-config=description *******> XYZ <*******"
>    Cisco-AVPair = "lcp:interface-config=ip vrf forwarding xyz"
>    Cisco-AVPair = "lcp:interface-config=ip unnumbered loopback 99"
>    Framed-MTU = 1492
>    Framed-Protocol = PPP
>    Service-Type = Framed
> 
> 
> 
> 
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator


--

Hugh Irvine
hugh at open.com.au

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER, SIM, etc. 
Full source on Unix, Linux, Windows, MacOSX, Solaris, VMS, NetWare etc.