On 7/11/07, Phil Mayers <p.mayers@imperial.ac.uk > wrote:

You've misconfigured your FreeRadius server to send attribute the Cisco
can't obey, specifically the Filter-Id

The cisco sees the reply:

> *May 22 15:43:52.088: RADIUS: Filter-Id [11] 9

then says

> *May 22 15:43:52.088: RADIUS/DECODE: invalid ACL type; FAIL

and sure enough, the ACL you are returning doesn't exist in the Cisco
config you show. Don't send back a Filter-Id reply unless the named ACL
exists. Either create the ACL, or don't send it.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html