I'm trying to add "Ascend-Data-Filter" to mysql using either phpmyadmin or dialup administrator, but it doesn't seem to work. It works fine in users text file as in: username Auth-Type := Local, User-Password == "xxx", Simultaneous-Use := 2 Service-Type = Framed-User, Framed-Protocol = MP, Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip a.b.c.0/20", Ascend-Data-Filter += "ip in forward tcp dstport = 25", Ascend-Data-Filter += "ip in forward", Framed-Compression = Van-Jacobsen-TCP-IP But the dialup administrator allow me to add only one Ascend-Data-Filter item. If I try to add using myphpadmin ************************************** Computer problems? ................... ..............http://www.multibyte.net
Sorry, I meant to save as draft, and accidently sent the below message. I got the Ascend-Data-Filter to work on old Livingston-style 'users' text file by adding lines blow. But I can't get it to work in MySQL. The dialup_admin won't let me add it, so used PHPMyAdmin to add those Ascend-Data-Filter lines. But not getting the usual attribute responses: vendor Ascend Ascend-VSA-Data-Filter=\0x01\0x01\0x01 ...... ... etc.. What am I missing?
I'm trying to add "Ascend-Data-Filter" to mysql using either phpmyadmin or dialup administrator, but it doesn't seem to work.
It works fine in users text file as in:
username Auth-Type := Local, User-Password == "xxx", Simultaneous-Use := 2 Service-Type = Framed-User, Framed-Protocol = MP, Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip a.b.c.0/20", Ascend-Data-Filter += "ip in forward tcp dstport = 25", Ascend-Data-Filter += "ip in forward", Framed-Compression = Van-Jacobsen-TCP-IP
But the dialup administrator allow me to add only one Ascend-Data-Filter item.
If I try to add using myphpadmin
************************************** Computer problems? ................... ..............http://www.multibyte.net
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
************************************** Computer problems? ................... ..............http://www.multibyte.net
squirrel@isot.com wrote:
The dialup_admin won't let me add it, so used PHPMyAdmin to add those Ascend-Data-Filter lines. But not getting the usual attribute responses:
vendor Ascend Ascend-VSA-Data-Filter=\0x01\0x01\0x01 ...... ... etc..
What am I missing?
You're not saying which NAS you're using. If the NAS doesn't understand Ascend data filters, it will print them as they appear on the wire, which is hex. NOT text. It appears that your NAS doesn't understand the attribute, OR you're using another tool to look at the RADIUS packets, and it doesn't understand the attribute. Alan DeKok.
I'm using NTRadPing v1.5 to test. It gets proper reply in hex for users in livingston style user file in text, but not for users in mysql.
squirrel@isot.com wrote:
The dialup_admin won't let me add it, so used PHPMyAdmin to add those Ascend-Data-Filter lines. But not getting the usual attribute responses:
vendor Ascend Ascend-VSA-Data-Filter=\0x01\0x01\0x01 ...... ... etc..
What am I missing?
You're not saying which NAS you're using. If the NAS doesn't understand Ascend data filters, it will print them as they appear on the wire, which is hex. NOT text.
It appears that your NAS doesn't understand the attribute, OR you're using another tool to look at the RADIUS packets, and it doesn't understand the attribute.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
************************************** Computer problems? ................... ..............http://www.multibyte.net
squirrel@isot.com wrote:
I'm using NTRadPing v1.5 to test. It gets proper reply in hex for users in livingston style user file in text, but not for users in mysql.
I really don't know what you mean by that. Can you supply examples? Alan DeKok.
In Livingston-style 'users' text file, I can enter below: username Auth-Type := Local, User-Password == "xxx" Service-Type = Framed-User, Framed-Protocol = PPP, Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip a.b.c.0/20", Ascend-Data-Filter += "ip in forward tcp dstport = 25", Ascend-Data-Filter += "ip in forward", Framed-Compression = Van-Jacobsen-TCP-IP The above works. Testing with NTRadPing utility, I do get successful login with the attributes. Attribute dump gives me the hex numbers such as Ascend-VSA-Data-Filter=\0x01\0x01\0x01 .... But when I add the same Ascend-Data-Filter information above into mysql database file (radgroupcheck table), although authenticates fine, I don't get "Ascend-VSA-Data-Filter=\0x01\0x01\0x01 ...." in attribute dump. Below is what is added to the table: GroupName Attribute op Value -------------------------------------------- Dialup Auth-Type := LOCAL Dialup Service-Type = Framed-User Dialup Framed-Protocol = PPP Dialup Framed-Compression = Van-Jacobsen-TCP-IP Dialup Ascend-Data-Filter += "ip in forward tcp est" Dialup Ascend-Data-Filter += "ip in forward dstip a.b.c.0/20" Dialup Ascend-Data-Filter += "ip in forward tcp dstport = 25" Dialup Ascend-Data-Filter += "ip in forward"
squirrel@isot.com wrote:
I'm using NTRadPing v1.5 to test. It gets proper reply in hex for users in livingston style user file in text, but not for users in mysql.
I really don't know what you mean by that. Can you supply examples?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
************************************** Computer problems? ................... ..............http://www.multibyte.net
participants (2)
-
Alan DeKok -
squirrel＠isot.com