1 Aug
2005
1 Aug
'05
1:21 a.m.
"Kris Benson" <kbenson@sd57.bc.ca> wrote:
Has anyone come up with a way to either A) ensure the outside username matches the inside one (guaranteeing the outside one isn't falsified) or B) log the accounting details with the tunnel information?
Use the "class" attribute. Set it to some value inside of the tunnel, and set "use_tunneled_reply=yes". You will then see it come back in accounting packets outside of the tunnel. You will need to log the *inner* tunnel username & Class attribute, to tie those two together, too. Alan DeKok.