Filtering out a attribute conditionally
Hi All I have a problem with my Cisco 7301's where I apply a address pool via a Cisco-AVPair (for each wholesale ISP customer) and the wholesale ISP supplies a Framed-IP-Address at the same time, the connection is kicked by the cisco. Is there any way of adding or removing the ip_pool bases on a rule ? Could Freeradius 2 do this ? Thanks Mike --- Current Attrs File xxxx.com Service-Type == Framed-User, Framed-IP-Address =* 255.255.255.254, Framed-IP-Netmask == 255.255.255.255, Framed-Route =* ANY, Cisco-AVPair := "ip:addr-pool=ip_pool_netyp", Framed-Compression =* Van-Jacobson-TCP-IP, Framed-Protocol == PPP, Framed-MTU =* 1492, Framed-Filter-ID =* ANY, Cisco-AVPair =* ANY, Reply-Message =* ANY, Proxy-State =* ANY, Idle-Timeout =* 600, Session-Timeout =* 28800, Port-Limit =* 1 --- Reply with out framed-ip-address Packet-Type = Access-Accept Wed Oct 31 19:55:36 2007 Cisco-AVPair := "ip:addr-pool=ip_pool_netyp" Service-Type = Framed-User Framed-Protocol = PPP Framed-MTU = 1500 Framed-Compression = Van-Jacobson-TCP-IP Session-Timeout = 14400 Idle-Timeout = 900 Port-Limit = 1 --- Reply with framed-ip-address Packet-Type = Access-Accept Wed Oct 31 19:55:36 2007 Cisco-AVPair := "ip:addr-pool=ip_pool_netyp" Service-Type = Framed-User Framed-IP-Address = XXX.XXX.11.247 Framed-IP-Netmask = 255.255.255.255 Framed-Protocol = PPP Framed-MTU = 1500 Framed-Compression = Van-Jacobson-TCP-IP Session-Timeout = 14400 Idle-Timeout = 900 Port-Limit = 1
Mike O'Connor wrote:
I have a problem with my Cisco 7301's where I apply a address pool via a Cisco-AVPair (for each wholesale ISP customer) and the wholesale ISP supplies a Framed-IP-Address at the same time, the connection is kicked by the cisco.
1.x should be able to filter out the Framed-IP-Address in the response from a home server.
Is there any way of adding or removing the ip_pool bases on a rule ?
I don't know what you mean by that.
Could Freeradius 2 do this ?
It would likely be a lot easier. Download 2.0, and read "man unlang". Alan DeKok.
Hi Alan
Is there any way of adding or removing the ip_pool bases on a rule ?
I don't know what you mean by that.
I still want the customer isp to be able to set a static ip address but I have to remove the cisco-avp pair when these come thought, or I want to add the cisco-avp pair when there is no static ip address.
Could Freeradius 2 do this ?
It would likely be a lot easier. Download 2.0, and read "man unlang".
I suspected that V2 would handle this better. I had read the unlang man page. Still trying get get a handle on it. Mike
participants (2)
-
Alan DeKok -
Mike O'Connor