11 Jul
2007
11 Jul
'07
5:40 a.m.
You've misconfigured your FreeRadius server to send attribute the Cisco can't obey, specifically the Filter-Id The cisco sees the reply:
*May 22 15:43:52.088: RADIUS: Filter-Id [11] 9
then says
*May 22 15:43:52.088: RADIUS/DECODE: invalid ACL type; FAIL
and sure enough, the ACL you are returning doesn't exist in the Cisco config you show. Don't send back a Filter-Id reply unless the named ACL exists. Either create the ACL, or don't send it.