debug print_tokens # as we're parsing this file debug print_policy # once the file has been parsed debug evaluate # print limited information during evaluation policy pool_conflict_ipaddr { if ( (proxy-reply:Framed-IP-Address =* "") && (reply:Cisco-Avpair =~ "ip:addr-pool.*")) { reply .= { Cisco-Avpair -~ "ip:addr-pool.*" } } } policy post-proxy { pool_conflict_ipaddr() }