Thanks! That seems to have fixed it radtest blarg blarg localhost 111 testing123 Sending Access-Request of id 145 to 127.0.0.1:1812 User-Name = "blarg" User-Password = "blarg" NAS-IP-Address = xxxxxxxxxxxxxx NAS-Port = 111 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=145, length=180 Ascend-Data-Filter = "ip in forward tcp est" Ascend-Data-Filter = "ip in forward dstip xx.xx.xx.0/24 0" Ascend-Data-Filter = "ip in drop tcp dstport = 25" Ascend-Data-Filter = "ip in forward 0" Ranner, Frank MR wrote:
Use the += operator, eg Ascend-Data-Filter += "ip in forward dstip xx.xx.xx.0/24", to append to a multi-valued list.
FR
-----Original Message----- From: freeradius-users-bounces+frank.ranner=defence.gov.au@lists.fre eradius.org [mailto:freeradius-users-bounces+frank.ranner=defence.gov.au@l ists.freeradius.org] On Behalf Of Shawn Mitchell Sent: Monday, 2 April 2007 07:45 To: FreeRadius users mailing list Subject: Re: Attributes
Ok, here's what I'm doing:
DEFAULT Client-IP-Address == xx.xx.xx.xx Ascend-Data-Filter = "ip in forward tcp est", Ascend-Data-Filter = "ip in forward dstip xx.xx.xx.0/24", Ascend-Data-Filter = "ip in drop tcp dstport = 25", Ascend-Data-Filter = "ip in forward", Fall-Through = Yes
I turned on logging of reply's, but all I'm seeing it send is:
Sun Apr 1 16:31:21 2007 Ascend-Data-Filter = "ip in forward tcp est"
I put this into the 'users' file btw.
Alan DeKok wrote:
Shawn Mitchell wrote:
Where can I say "If client is 'x', then also send these
attributes to
users being authenticated..."?
In the "users" file.
DEFAULT Client-IP-Address == 1.2.3.4 Reply-Message = "You're coming from 1.2.3.4"
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html