IPV6-Address accounting
Hello, Quick question. We're currently using linelog to forward accounting information to our firewall for ip<->username matching, which has been working well for years. We've now got a test deployment of IPv6, and I need to do the same ipv6<->username matching. I've got it working, but only to 1 IPv6 address, when there could be many (as shown with the file based accounting log). Is there a way to run through the array of IPv6 addresses and getting a syslog line per IPv6 address? Thu Jan 25 09:41:48 2024 Framed-IP-Address = XXX.XXX.21.202 Framed-IPv6-Address = X:X:X:X:484d:9d72:e002:f00f Framed-IPv6-Address = X:X:X:X:b036:8ae5:2b04:1e52 Framed-IPv6-Address = fe80::30da:576d:c62d:2870 User-Name = "YYYY" Any pointers greatly appreciated. Thanks, Hefin
On 25.01.24 11:36, Hefin James [ahj] (Staff) via Freeradius-Users wrote:
Hello,
Quick question. We're currently using linelog to forward accounting information to our firewall for ip<->username matching, which has been working well for years. We've now got a test deployment of IPv6, and I need to do the same ipv6<->username matching. I've got it working, but only to 1 IPv6 address, when there could be many (as shown with the file based accounting log).
Is there a way to run through the array of IPv6 addresses and getting a syslog line per IPv6 address?
Thu Jan 25 09:41:48 2024 Framed-IP-Address = XXX.XXX.21.202 Framed-IPv6-Address = X:X:X:X:484d:9d72:e002:f00f Framed-IPv6-Address = X:X:X:X:b036:8ae5:2b04:1e52 Framed-IPv6-Address = fe80::30da:576d:c62d:2870 User-Name = "YYYY"
Any pointers greatly appreciated.
Thanks, Hefin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, I'd give attribute lists a try. See: https://freeradius.org/documentation/freeradius-server/3.2.4/unlang/list.htm... Michael.
On 25/01/2024 10:36, Hefin James [ahj] (Staff) via Freeradius-Users wrote:
Is there a way to run through the array of IPv6 addresses and getting a syslog line per IPv6 address?
your solution is likely to be something along the lines of foreach &Framed-IPv6-Address { <do something using the Foreach-Variable-0 attribute> } -- Nick Porter
participants (3)
-
Hefin James [ahj] (Staff) -
Michael Schwartzkopff -
Nick Porter