Multiple VSA pairs
peter.hicks at poggs.co.uk
Wed Aug 31 14:20:27 CEST 2005
I'm using FreeRADIUS with MySQL for accounting and authentication.
>From a Cisco 2651XM router, I have multiple Cisco-AVPair attributes send in
rad_recv: Accounting-Request packet from host 192.168.167.14:1646, id=186, length=201
Acct-Session-Id = "00009E13"
Cisco-AVPair = "isakmp-group-id=cg-ectvpn"
Framed-IP-Address = 172.16.33.119
Cisco-AVPair = "isakmp-initator-ip=184.108.40.206"
User-Name = "pwh"
Cisco-AVPair = "connect-progress=Auth Open"
Acct-Authentic = RADIUS
Acct-Status-Type = Start
Cisco-NAS-Port = "FastEthernet0/1"
NAS-Port = 1
NAS-IP-Address = 192.168.167.14
Acct-Delay-Time = 0
When trying to refer to these in a SQL INSERT statement for accounting
(where if the AVPair is 'isakmp-initiator-ip', it gets stripped and the
address inserted), the AVPairs overwrite each other.
Is there a workaround for this, or is the behaviour of a Cisco IOS router
'broken' for sending the same attribute twice in the same packet?
More information about the Freeradius-Users