Hi, I am very new to radius and need help to confirm the following. I have an existing radius server running on Cisco ACS 4.2. In the current configuration, all users are configured using priv ID 15. I wanted to setup a proxy radius, where the proxy will relay an authentication and authorization request to the Cisco ACS, but when relaying back the authentication and authorization message back to the clients, I want to overwrite the priv ID with something other than 15 (for eg, user XXX -> priv 14, user YYY -> priv10, etc). Is there a way for me to do that? Or is this behavior is actually prohibited by the standards? Thanks in advance, LMR
Lutrika Mufti Rachmat wrote:
I have an existing radius server running on Cisco ACS 4.2. In the current configuration, all users are configured using priv ID 15. I wanted to setup a proxy radius, where the proxy will relay an authentication and authorization request to the Cisco ACS, but when relaying back the authentication and authorization message back to the clients, I want to overwrite the priv ID with something other than 15 (for eg, user XXX -> priv 14, user YYY -> priv10, etc).
This can be done. See "man unlang" for re-writing attributes.
Is there a way for me to do that? Or is this behavior is actually prohibited by the standards?
It's not prohibited. Alan DeKok.
participants (2)
-
Alan DeKok -
Lutrika Mufti Rachmat