Adding "Force10-avpair" to dictionary
I am trying to configure FreeRADIUS to add the "Force10-avpair" VSA to some replies. The VSA is (mostly) documented here: https://www.dell.com/support/manuals/us/en/04/force10-s4048-on/s4048-on-9.10... Am I correct that the dictionary should look something like this: VENDOR Force10 6027 BEGIN-VENDOR Force10 ATTRIBUTE Force10-AVPair 1 string END-VENDOR Force10 (I'm having to guess at the OID of the attribute, as Dell/Force 10 don't seem to have every documented it anywhere.) Would this just go into /etc/raddb/dictionary? Thanks! -- ======================================================================== Ian Pilcher arequipeno@gmail.com -------- "I grew up before Mark Zuckerberg invented friendship" -------- ========================================================================
On Wed, 2019-04-24 at 09:40 -0500, Ian Pilcher wrote:
Am I correct that the dictionary should look something like this:
VENDOR Force10 6027 BEGIN-VENDOR Force10 ATTRIBUTE Force10-AVPair 1 string END-VENDOR Force10
(I'm having to guess at the OID of the attribute, as Dell/Force 10 don't seem to have every documented it anywhere.)
If the enterprise / attribute numbers are wrong, it won't work. The number goes in the packet, not the name.
Would this just go into /etc/raddb/dictionary?
Yes -- Matthew
On 4/24/19 9:45 AM, Matthew Newton wrote:
If the enterprise / attribute numbers are wrong, it won't work. The number goes in the packet, not the name.
Yeah. They do document the vendor ID, and they seem to have basically copied Cisco, so I'm hoping that their using OID 1, which (based on looking at the existing dictionaries) seems to be somewhat common. -- ======================================================================== Ian Pilcher arequipeno@gmail.com -------- "I grew up before Mark Zuckerberg invented friendship" -------- ========================================================================
participants (2)
-
Ian Pilcher -
Matthew Newton